In April 2020, the now-defunct Brazilian e-commerce platform HomeRefill suffered a data breach. This incident was later redistributed as part of a larger corpus of data. Have I Been Pwned added information about this breach to their dashboard on October 3, 2025.
The breach involved 187,500 unique email addresses. Confirmed data types include names, phone numbers, dates of birth, and salted password hashes. It has not been publicly confirmed whether financial data, medical data, or SSN were exposed.
Details surrounding data breaches can emerge over time, and official notices may be delayed.