Ragazzo Brazil Fast-Food Chain 2021 Customer Data Breach
In August 2021, an administrative MySQL database backup from Ragazzo (deliveryragazzo.com.br), a leading Italian-themed fast-food and delivery chain operated by Brazil's Grupo Habib's, was breached and circulated across underground hacker communities.
Exposed Data Types
8- Names
- Email addresses
- Phone numbers
- Dates of birth
- National identity numbers
- Passwords
- IP addresses
- Device information
About This Breach
Technical analysis of the clientes customer table confirms the compromise of 936,109 unique customer accounts. Leaked attributes encompass full legal names, email addresses, contact telephone numbers, dates of birth, Brazilian federal tax IDs (CPF - Cadastro de Pessoas Físicas), account passwords, client IP addresses, and mobile device hardware signatures.
Because CPF numbers serve as the fundamental authentication key across Brazilian financial and governmental systems, this leak represents a severe threat of credit fraud, identity impersonation, and automated credential-stuffing across local online retailers.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
