Vivara, Brazil’s largest jewelry retailer, was listed on the Medusa ransomware group’s leak site on June 15, 2024. The company, which operates more than 200 stores and sells luxury watches from brands including Coach, Gucci, and Lacoste, had 1.18 TB of internal files exfiltrated. The Medusa listing states that the stolen data includes confidential information belonging to the CEO, senior management, employees, and customers, along with material related to alleged hidden illegal activities. Anyone whose personal data was held by Vivara may now be exposed.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Vivara
Get alerted the next time Vivara files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Vivara’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Reported Details from the Listing
The Medusa leak site posting, first observed on June 15, 2024, claims the attackers exfiltrated 1.18 TB of internal files during a ransomware incident. The disclosure indicates that the data encompasses confidential records of the company’s leadership, staff, and customer base. It also references documents purporting to show previously undisclosed illegal activities by the organization. The listing does not specify the exact number of individuals affected or provide a detailed inventory of every file type. Public mirrors of the leak site, such as those aggregated on ransomware.live, state the posting but add no further technical detail from Vivara itself.
Why This Matters for You and Your Family
When a major retailer like Vivara loses control of internal files, the consequences reach far beyond corporate embarrassment. If you have ever bought jewelry or a watch from one of their stores, paid with a credit card, or provided contact details for a warranty or loyalty program, your information may be among the records now in attackers’ hands. The same applies to current or former employees and their family members whose addresses, phone numbers, or tax identifiers were stored in corporate systems. Customer and employee records in the hands of extortionists create immediate risks of fraud, phishing campaigns tailored to Vivara customers, and long-term identity theft. Brazilian residents are particularly exposed because national ID numbers and banking details, once leaked, are frequently traded on local underground markets.
Doxxing and Identity-Chain Implications
Exposed internal files rarely contain isolated data points. A single spreadsheet can link an email address to a full name, home address, national identification number, and purchase history. Attackers and subsequent buyers can combine these details with information from other breaches to build complete identity profiles. This chaining process turns a retail purchase into a gateway for account takeovers, SIM-swapping attempts, or targeted social-engineering attacks against you or your children. Credential leaks of this nature also cascade into gaming accounts; many families reuse passwords or security questions across retail logins and online gaming platforms, allowing one breach to compromise a child’s Roblox, Fortnite, or Steam account and expose additional personal details.