TUPI
Data Breach on December 10, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | tupisa.com.py | ||
| Threat Actor | Qilin | ||
| Date Discovered | Dec 10, 2025 | ||
| Description | TUPI S.A. is a major retail company based in Paraguay, established in 1996, known for offering a wide variety of products from top brands, focusing on electronics, appliances, and home goods, alongside strong customer service. | ||
| Leak Size | Unknown |
Credential Exposure for tupisa.com.py
We've indexed 160 @tupisa.com.py accounts from external breaches, plus 148 credentials for tupisa.com.py itself.
Last checked Aug 16, 2026
| @tupisa.com.py addresses from external breaches | |
|---|---|
| Third-party breaches | 147 accounts · across 17 breaches · 144 with a plaintext password · most recent Mar 12, 2024 |
| Combo lists | 16 accounts · most recent Aug 4, 2026 |
| Passwords for tupisa.com.py accounts | |
|---|---|
| Combo lists | 103 logins · most recent Aug 8, 2026 |
| Infostealer logs | 54 logins · 39 infected devices · most recent Aug 1, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
TUPI was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.