32.4K Hubla User Records Leaked in July 2025 Breach

Data Breach Summary

In July 2025, Hubla — a Brazilian technology company that helps creators manage and monetize their communities — suffered a significant data breach. The attack, attributed to the hacker “@888”, resulted in the exposure of 32,400 user records, including sensitive personal and transactional data.

The leaked dataset, discovered on the cybercrime forum DarkForums.st by user “chucky_BF”, contained a wide range of information from invoices to user identities, payment details, and affiliate data.

---

Where and How?

The breach was shared publicly on DarkForums, a well-known cybercrime marketplace. The leaked file reportedly contains detailed invoice-level metadata such as:

• Invoice statuses and payment methods
• Full names, emails, phone numbers, and national ID numbers of customers
• Addresses including street, neighborhood, ZIP code, and city
• Product and subscription information
• Cookies such as gclid, fbclid, fbc, fbp
• Affiliate and commission breakdowns

Such data can be exploited for phishing, financial fraud, and identity theft — especially considering the comprehensive financial and personal details included.

Company Data Breach History

As of August 7, 2025, there are no previously reported or confirmed data breaches involving Hubla. This July 2025 incident marks the first known large-scale exposure of sensitive customer information linked to the company. No official statement or public disclosure from Hubla has been released regarding the breach at this time.

---

Recommendations for Personal Data Protection

If you believe your data may have been exposed, take the following steps:

• Change your passwords immediately, especially for accounts tied to the email leaked.
• Enable two-factor authentication (2FA) wherever available.
• Be cautious of phishing emails, particularly those mimicking payment services or platforms like Hubla.
• Avoid reusing passwords across multiple platforms.
• Monitor financial activity and consider placing alerts on your accounts.

---

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.