Portugal PSD Deputies' Data & Student Association Hashed Credentials | Blat Studio

Boogeymann · 05-05-26, 08:25 PM

[Image: 250px-Flag_of_the_Social_Democratic_Part...29.svg.png]

[Image: images?q=tbn:ANd9GcTTEJDc3Fts3wVRVKIqps-...Mu2MY-Pw&s]

"BLAT Studio (www.blatstudio.com), a Lisbon-based creative digital agency specializing in marketing, design, web development and social media."

"The Social Democratic Party (PSD) is a major centre-right, liberal-conservative political party in Portugal, founded in 1974 by Francisco Sá Carneiro. Known for its orange branding, the party focuses on center-right policies and is currently a ruling party, often competing with the Socialist Party (PS)."

Some of the universities affected include:

iscal.ipl.pt
ist.pt
fadu.pt
esml.ipl.pt

The exfiltrated data includes:

University emails from associations with hashed credentials & other enterprises (Base64 encoded + bcrypt) | 119 records

 {
    "displayName": "Tesouraria",
    "email": "[email protected]",
    "emailVerified": true,
    "localId": 31,
    "passwordHash": "JDJhJDEwJGUyUkl5YUo0eXpSTWRHY2ZDdW5uV3VtMUFzeDVZTDlvckFydjE1WTA0UmRqQWpGaHdFZmhp"
  },
  {
    "displayName": "Pelouro Relações Externas",
    "email": "[email protected]",
    "emailVerified": true,
    "localId": 32,
    "passwordHash": "JDJhJDEwJDlONHU3ZGFUS25iUkphdXAzSG9DZ09BeHZWbVRLL1lCNnM4RzRPYU9tZ293dng0cDQudDNt"
  },
  {
    "displayName": "Comunicação e Imagem",
    "email": "[email protected]",
    "emailVerified": true,
    "localId": 37,
    "passwordHash": "JDJhJDEwJDFqaGRNSWU1ZEtGTENmREhZVU4xUE9SNkdUUnBtZGNvNWozWjA2MXJMaklkOUpsVVdpYi9D"
  },
  {
    "displayName": "Comunicação",
    "email": "[email protected]",
    "emailVerified": true,
    "localId": 38,
    "passwordHash": "JDJhJDEwJExza3dFYjhiZ2FManQuOW40YWx1NU9NVkJBWHFHN0ZFZ1pWaTcxUTJEaVJVc0d2TWdSbHZT"
  },
  {
    "displayName": "Administrador",
    "email": "[email protected]",
    "emailVerified": true,
    "localId": 40,
    "passwordHash": "JDJhJDEwJFBWRWJrcHVrT3VLeW1mSTY2aVBjRGUzMllQVmNkdWRoVGZwdWo2TnB0SmtESVY4Szd5VXc2"
  },
  {
    "displayName": "Francisco Duarte",
    "email": "[email protected]",
    "emailVerified": true,
    "localId": 41,
    "passwordHash": "JDJhJDEwJDZ1dEJtU1lXTkdUc0JLSnZ2S0FjNmVsaXRoNXYvRTlSU1puaWhsdFdkSk0uV0Z1RTNsc1Zh"
  },

Personal information of PSD political deputies (names, addresses, phone numbers, work/personal emails, positions, social media links) | 127 records

{"fields": {"website": {"stringValue": ""}, "linkedin": {"stringValue": ""}, "address": {"stringValue": ""}, "twitter": {"stringValue": ""}, "tiktok": {"stringValue": ""}, "position": {"stringValue": "Secretária do Presidente"}, "name": {"stringValue": "Eduarda Pedro"}, "instagram": {"stringValue": ""}, "email": {"stringValue": "[email protected] "}, "youtube": {"stringValue": ""}, "facebook": {"stringValue": ""}, "phone": {"stringValue": "963 116 132"}}}
{"fields": {"name": {"stringValue": "Maria João Reis"}, "phone": {"stringValue": "916 469 002"}, "address": {"stringValue": ""}, "position": {"stringValue": "Secretária do Chefe de Gabinete"}, "linkedin": {"stringValue": ""}, "instagram": {"stringValue": ""}, "email": {"stringValue": "[email protected] "}, "twitter": {"stringValue": ""}, "website": {"stringValue": ""}, "youtube": {"stringValue": ""}, "tiktok": {"stringValue": ""}, "facebook": {"stringValue": ""}}}
{"fields": {"facebook": {"stringValue": ""}, "instagram": {"stringValue": ""}, "twitter": {"stringValue": ""}, "phone": {"stringValue": "914 181 830"}, "website": {"stringValue": ""}, "address": {"stringValue": ""}, "email": {"stringValue": "[email protected] "}, "position": {"stringValue": "Secretária"}, "name": {"stringValue": "Maria De Lurdes Leitão"}, "youtube": {"stringValue": ""}, "linkedin": {"stringValue": ""}, "tiktok": {"stringValue": ""}}}
{"fields": {"facebook": {"stringValue": "https://www.facebook.com/joaquim.sarmento.90"}, "name": {"stringValue": "Joaquim Miranda Sarmento"}, "email": {"stringValue": "[email protected]"}, "position": {"stringValue": "Presidente"}, "youtube": {"stringValue": ""}, "phone": {"stringValue": "965 303 177"}, "twitter": {"stringValue": ""}, "instagram": {"stringValue": "https://www.instagram.com/joaquimmirandasarmento/"}, "address": {"stringValue": ""}, "linkedin": {"stringValue": ""}, "tiktok": {"stringValue": ""}, "website": {"stringValue": ""}}}
{"fields": {"name": {"stringValue": "Hugo Patrício Oliveira"}, "position": {"stringValue": "Deputado"}, "website": {"stringValue": "www.hugooliveira.net"}, "tiktok": {"stringValue": ""}, "address": {"stringValue": ""}, "twitter": {"stringValue": "https://twitter.com/h_oliveira"}, "phone": {"stringValue": "916 611 286"}, "instagram": {"stringValue": "https://www.instagram.com/hugopmoliveira/"}, "youtube": {"stringValue": ""}, "facebook": {"stringValue": "https://www.facebook.com/hugopmoliveira"}, "email": {"stringValue": "[email protected] "}, "linkedin": {"stringValue": "https://www.linkedin.com/in/hugo-oliveira-12326534"}}}
{"fields": {"twitter": {"stringValue": ""}, "youtube": {"stringValue": ""}, "name": {"stringValue": "Anabela Vieira"}, "position": {"stringValue": "Secretária"}, "linkedin": {"stringValue": ""}, "email": {"stringValue": "[email protected] "}, "instagram": {"stringValue": ""}, "address": {"stringValue": ""}, "phone": {"stringValue": "965 020 741"}, "website": {"stringValue": ""}, "tiktok": {"stringValue": ""}, "facebook": {"stringValue": ""}}}
{"fields": {"twitter": {"stringValue": "https://twitter.com/gomes_topa"}, "tiktok": {"stringValue": ""}, "website": {"stringValue": ""}, "youtube": {"stringValue": ""}, "name": {"stringValue": "António Topa Gomes"}, "instagram": {"stringValue": "https://www.instagram.com/topagomes/"}, "linkedin": {"stringValue": ""}, "position": {"stringValue": "Deputado"}, "address": {"stringValue": ""}, "email": {"stringValue": "[email protected] "}, "phone": {"stringValue": "917 803 436"}, "facebook": {"stringValue": "https://www.facebook.com/profile.php?id=100002317597522"}}}

Internal BLAT Studio communications with clients. | Contains 1,018,396 lines (attachments, conversations etc)

"-N3V-tsUJfLmPFdXH4H8": {
        "body": "Coloca-me na arte final, sff",
        "createdAt": 1654099514,
        "updatedAt": 1654099514,
        "userId": 136
      },
      "-N3V6AFUrvtfXGCwyK8L": {
        "body": "<p>Boa tarde, aqui ficam as artes pedidas. vai ao encontro do pedido?</p>",
        "createdAt": 1654101160,
        "updatedAt": 1654101160,
        "userId": 144
      },
      "-N3V6AwZOm3s_v-LllWT": {
        "attachments": [
          80724
        ],
        "body": "<p>Boa tarde, aqui ficam as artes pedidas. vai ao encontro do pedido?</p>",
        "createdAt": 1654101160,
        "updatedAt": 1654101163,
        "userId": 144
      },
      "-N3V6Azpse-OI7Nl3UYN": {
        "attachments": [
          80725
        ],
        "body": "<p>Boa tarde, aqui ficam as artes pedidas. vai ao encontro do pedido?</p>",
        "createdAt": 1654101160,
        "updatedAt": 1654101163,
        "userId": 144
      },
      "-N3V6BGnE2NSAzUL-kjr": {
        "attachments": [
          80724,
          80725,
          80730
        ],
        "body": "<p>Boa tarde, aqui ficam as artes pedidas. vai ao encontro do pedido?</p>",
        "createdAt": 1654101160,
        "updatedAt": 1654101164,
        "userId": 144
      },
      "-N3V6CWPwYkdPMoLBzM2": {
        "attachments": [

Vector: exposed Firebase Database instance without security rules...

I was not planning to post this, but it's just sitting on my hard drive, and the PSD deputies' personal information looks interesting.

The data is from a couple of months ago

https://files.catbox.moe/k613ze.gz
https://files.fm/u/nvv9djb25m