A significant data breach has allegedly occurred, impacting Preparatório Bucomaxilo, a Brazilian educational platform that provides preparatory courses for dental professionals aspiring to specialize in Bucomaxillofacial Surgery (CTBMF). The institution is a key resource for dentistry students and practicing dentists across Brazil, offering specialized training and resources to help them pass residency entrance exams. The platform’s importance lies in its focused curriculum and its role in shaping the careers of future dental surgeons in the country. The alleged breach is said to have originated from a SQL database associated with the company’s website, preparatoriobucomaxilo.com.br.
The compromised data, reportedly contained in a 50MB zipped SQL file, is alleged to include a wide range of sensitive personal and user information. The breach, dated June 6, 2025, appears to have exposed the records of over 5,200 users. The leaked information allegedly contains detailed user data from the website’s WordPress database, potentially exposing users to various online threats, including phishing scams, identity theft, and other malicious activities.
The compromised database allegedly includes the following information:
- User IDs
- User login names and display names
- Hashed passwords
- Full names
- Email addresses
- User registration dates and IP addresses
- Contact form submissions with personal details such as RG (Brazilian ID), CPF (Brazilian individual taxpayer registry), phone numbers, and professional information.