Plesio Base de clientes da Plesio · Breach

Forum actor claims sale of Plesio database with 207,903 rows

Oct 28, 2026 · 1 min read

A threat actor on an underground forum claims to sell a Plesio database, with 207,903 unique rows and customer credentials. Plesio is a Bulgarian online retailer of computers and electronics. The actor says the passwords work for email logins and offers a free sample. The claim is not independently verified and Plesio has not confirmed an incident; if authentic, the data enables credential stuffing and account takeover.

By HIFY Radar newsroom Updated 10/28/2026 11:26 AM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A seller on an underground forum claims to hold a Plesio database, with 207,903 unique rows and customer passwords. Plesio is a Bulgarian online retailer of computers and electronics. The seller says the passwords work for email logins, offers a free sample and additional rows on request. The claim is unverified and the company has not confirmed an incident.

Why it matters

If the database is real, Plesio customers face email and account compromise wherever they reuse the same password, plus use of their data as marketing leads. For the company, there is risk of account fraud and loss of customer trust.

What to do

Monitor for abnormal logins on customer accounts and force password resets with two-factor authentication. Tell customers to change reused passwords, especially on email, and track the forum for new samples or confirmations.

For the technical team

Affected: Plesio Base de clientes da Plesio, varejista online de computadores e eletrônicos da Bulgária · Plesio customer database; Plesio is a Bulgarian online retailer of computers and electronics. 207,903 unique rows alleged, with customer credentials.
Exploitation: No exploitation reported. The underground forum sale claim was surfaced by @DailyDarkWeb and is not independently verified. The actor offers a free sample and additional rows on request.
Fix: No patch applicable; Plesio has not confirmed an incident. Mitigation noted in the report: customers who reuse passwords should change them, especially on email accounts.
Vector: No technical flaw described in the sources. Per the @DailyDarkWeb report, the actor says the passwords are usable for email account checks, pointing to credential stuffing and account takeover use.
More details: The actor markets the data as 'Bulgarian marketing leads'. Plesio has not confirmed an incident. The original @DailyDarkWeb post on X restricts the full source to subscribers.