A hacker is selling 54 million records allegedly linked to Airbnb, Uber, PayPal, Booking.com, and Google.
The threat actor, known as Marx, claims to have live access to the source of the data, potentially allowing them to intercept sensitive communications, including authentication codes, as they reach users.
Cybernews researchers looked at the claims, here’s what they found:
- The samples of data appear to originate from a single third-party SMS service.
- The samples contain phone numbers and mobile carrier information, while the alleged Uber data also includes names of people who booked rides. The message contents seem to be heavily stripped.
- The samples examined appear geographically limited to India and Oman, and researchers could not determine the full scope of the alleged breach.
If proven to be legitimate, such exposed data could result in increased risks of phishing attacks and, in some cases, account takeovers.
Here’s the full investigation:
https://cybernews.com/security/airbnb-uber-google-data-breach-claims
Related
This entry was posted on October 5, 2026 at 10:14 am and is filed under Commentary with tags Cybernews. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Hacker claims live access to SMS data linked to Airbnb, Uber, PayPal, Booking.com and Google
A hacker is selling 54 million records allegedly linked to Airbnb, Uber, PayPal, Booking.com, and Google.
The threat actor, known as Marx, claims to have live access to the source of the data, potentially allowing them to intercept sensitive communications, including authentication codes, as they reach users.
Cybernews researchers looked at the claims, here’s what they found:
If proven to be legitimate, such exposed data could result in increased risks of phishing attacks and, in some cases, account takeovers.
Here’s the full investigation:
https://cybernews.com/security/airbnb-uber-google-data-breach-claims
Share this:
Like this:
Related
This entry was posted on October 5, 2026 at 10:14 am and is filed under Commentary with tags Cybernews. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.