DATABASE [BR] Cia de Trade: Philip Morris campaign. 215MB PST, HR paystubs. 965 staff creds

DBHunter

Infinity Member
Golden Member
Joined
August 23, 2025
Messages
2,612
Reaction score
7,308
Points
113
  • Thread Author
  • #1
Agência de Trade Marketing | Cia de Trade Philip Morris Breach
.
This is the backup of Cia de Trade, a Brazilian web host/agency. The mailbox is the support box for mandandobemvigor.com.br, and the object index shows they back up Ambev, Rock in Rio, M. Dias Branco, Movida and a bunch of other client sites.
Whats Inside:
    • 965 staff login accounts with MD5(salt) hashes from Philip Morris: 379 @pmi.com (Philip Morris International staff),27 @contracted.pmi.com, 13 @dapal.com.br + 27 @dapal-al.com.br
    • (Dapal, the loyalty-platform vendor): 29 @unisultabacos.com.br, 24 @grupopegoraro.com.br, 9 @gpssa.com.br, 9 @distribuidorasucesso.com
    • 87,762 access-log rows (visitor IP + page URI + timestamp)
    • 12,293 session rows incl. 8,093 distinct campaign session tokens
    • 956 client records + 156 client logins (campaign participants)
  • - MySQL dumps listed in the same bucket: db_clubeamend, db_ignite_pmb, db_ignite_demodestro, ilavou, ciadetra_wp518.sql.gz.
  • - 215 MB Outlook PST. All data is intact, it needs a CFB-aware PST repair before you open it.
  • - 46 keys (in the hide), naming the actual client brands.
  • - Brazilian employee paystubs (HR PII Docs).


Sample rows (tb_loginadapter):
admilson.pereira@pmi.com | ADMILSON GOMES PEREIRA | 4b64354c7bc959dc317441c35bcc69e7968085f7 | fjEL6pQPU8Ds
adoniran.claudino@pmi.com | ADONIRAN AUGUSTO CLAUDINO | 12e6ac07e722b789a773fd591b419fa1 | pElA3uaCs5rm
adriano.silva1@pmi.com | Adriano Batista da Silva | a416b99995751b53c1a20648a9451a590a8a7947 | cl2pBmqMX35s
agrimar.oliveira@pmi.com | FRANCISCO AGRIMAR DE OLIVEIRA SILVA | ed53fe3bb46913829caaf31f7807e873 | tGQXD3PVC89m
eduardo.souza.0612@gmail.com | Eduardo Pedro de Souza | edf41b3740735fa403e783d04a99e00b22a37ae2 | lVT2U5hkeAts
dercole3d@hotmail.com | LUIZ FILIPE D ERCOLE CORREA DE CARVALHO | d27509f5906ccffe906a74f77fc1a589 | 4HxdRLzKkA6m

Access log (page | IP | time):
/rh-contato/ ("Fale conosco — Philip Morris") | 179.209.140.46 | 2022-12-01 18:43:55
/fonts/fa/webfonts/fa-regular-400.woff2/ | 187.95.88.71 | 2023-02-06 14:44:51

Session (token | IP | time):
7ae08bf4f37773bc2d156c72c2516cc03560 | 17.64.33.82 | 2023-01-12 12:46:59
f4fcb12b5716d01750557512ca404a074e53 | 179.209.140.46 | 2023-06-20 23:29:28
Full data:
To see this hidden content, you must React with one of the following reactions : Like, Love, Haha, Wow
 
Reactions: Jackaduu, MarcReif2002 and danielvitor61

Similar threads

Replies
0
Views
2K
SUB-ZER0
Replies
0
Views
202
DBHunter
Replies
0
Views
159
DBHunter
Replies
0
Views
612
SUB-ZER0
  • Tags
    breach-leak-download hacked-database-download staff-credentials-download