Remedia Homöopathie Data Breach
The 2021 Remedia Homöopathie data breach occurred in February 2021 when the customer and address book database of Remedia Homöopathie (remedia.at), an Austrian homeopathic pharmacy and laboratory based in Eisenstadt producing over 5,500 natural remedies and shipping worldwide, was breached and leaked on cybercrime forums.
Exposed Data Types
7- Email addresses
- Passwords
- Names
- Physical addresses
- Phone numbers
- Dates of birth
- Genders
About This Breach
What information was affected in the Remedia Homöopathie incident?
The compromised SQL/CSV datasets (Users.csv and UsersAddressBook.csv) contain comprehensive customer profiles and shipping registers. Impacted records for 134,309 unique pharmacy clients encompass:
- Account & Authentication Secrets: Canonical validated email addresses and passwords secured with bcrypt (
$2a$08$). - Personal Identifiers: Customer full names (FirstName, LastName), honorific titles (Titel), and dates of birth (DayOfBirth).
- Physical Location Data: Delivery street addresses (Street, Additional), postal codes (PostCode), cities (City), and country identifiers.
- Contact & Fiscal Data: Telephone numbers (Telephone) and tax registration numbers (TaxNr).
How many accounts were affected?
Rigorous RFC canonical parsing and deduplication across 134,602 customer records confirmed 134,309 unique valid email addresses.
Technical analysis and security risks
While authentication secrets were fortified with bcrypt hashing, the unauthorized exposure of personal delivery addresses, birthdates, and telephone numbers from an online pharmacy creates medical privacy risks and potential targets for health-themed phishing and social engineering.
Recommended actions for affected users
Customers of Remedia Homöopathie should:
- Remain vigilant against unsolicited emails or calls claiming to be from pharmacy shipping or billing departments.
- Update passwords on any other platforms where the same password was historically used.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
