Hurb

In March 2019 the Brazilian online travel agency Hurb formerly known as Hotel Urbano suffered a massive security breach. The incident led to the exposure of personal information belonging to approximately 20 million customers. The compromised database was later discovered on various underground forums. The breach included sensitive user details such as email addresses and passwords stored as unsalted MD5 hashes which are highly vulnerable to cracking. Additionally personal identifiers like full names and phone numbers were leaked posing a significant risk of identity theft and phishing attacks for the affected users.