What Happened
In December 2025, specifically on December 16, the Brazilian crowdfunding platform APOIA.se suffered a data breach when its database was compromised and posted on an online hacking forum, exposing personal information of approximately 451,000 users (with figures ranging from 450,764 to 450,800 unique accounts across sources). The leaked data included email addresses, full names, and physical addresses, though the company confirmed in January 2026 that sensitive details like payment information and campaign support records were not exposed, as payments were handled by PCI-DSS certified partners. APOIA.se officially acknowledged the incident in January 2026, and the data was later added to Have I Been Pwned on February 16, 2026. No technical breach details or post-incident security updates were disclosed by the company.
