Breachesby GlyphCatho
Disclosed Aug 18, 20201,173,012 accountsUnverified
In approximately March 2020, the Brazilian recruitment website Catho was compromised and subsequently appeared alongside 20 other breached websites listed for sale on a dark web marketplace. The breach included almost 11 million records with 1.2 million unique email addresses. Names, usernames and plain text passwords were also exposed. The data was provided to HIBP by breachbase.pw .
What is known
| People affected | 1,173,012 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Aug 18, 2020 |
| Happened | Mar 1, 2020 |
| Attack | Not stated |
| Data exposed | EmailsNamesPasswords |
| Sector | Tech |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
History of this record
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.