What Happened
In October 2017, Legendas.tv (also known as LegendasTV), a now-defunct Brazilian website for downloading Portuguese subtitles for movies and TV shows, suffered a data breach exposing records of approximately 2.4 to 3.9 million users. The compromised data included usernames, email addresses, IP addresses, names, and passwords—either stored in plain text or as unsalted SHA-1 hashes—making accounts highly vulnerable to exploitation. The incident was publicly reported in February 2019 and later added to major breach databases like Have I Been Pwned in January 2024, with the stolen data appearing for sale on dark web markets around that time.
