What was exposed, when it happened, and which databases confirm it.
- accounts
- 4,010,536
- Breached
- March 1, 2020
- Last Update
- August 18, 2020
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In approximately March 2020, the Brazilian recruitment website Catho was compromised and subsequently appeared alongside 20 other breached websites listed for sale on a dark web marketplace. The breach included almost 11 million records with 1.2 million unique email addresses. Names, usernames and plain text passwords were also exposed. The data was provided to HIBP by breachbase.pw.
Compromised Info
- Email addresses
- Names
- Passwords
- Usernames
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- Dehashed— linked via domain matching
- HIBP
FAQ
What was leaked in the Catho breach?
The Catho breach exposed: Email addresses, Names, Passwords, and Usernames.
When did the Catho breach happen?
The Catho breach was disclosed on March 1, 2020 and affected 4,010,536 records.
Am I affected by the Catho breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Catho leak.