What Happened
In June 2025, specifically around June 27-30, TheSqua.re, a global serviced-apartment booking platform, suffered a data breach where threat actor “888” disclosed stolen user data on DarkForums.st, affecting approximately 107,000 unique accounts (or 100,540 rows representing 86,360 individuals per varying reports). Exposed data included email addresses, full names, phone numbers (mobile and work), cities/geographic locations, account creation dates, user status, subscription flags, rewards balances, and user types (corporate/leisure), with no prior breach history for the company and limited details on the intrusion method—likely unsecured databases or vulnerabilities—prompting risks like phishing and scams; TheSqua.re did not respond to disclosure attempts despite HIBP verification.
