14-10-26, 08:29 PM
Look, there are suspected or actual Pathao employees and their lackeys on this channel.
First of all, fuck you guys - you're a bunch of useless idiots who have no value except for scamming your users every day. Second, you're lazy as fuck and good for nothing, only good at squeezing the life out of your riders.
So we've decided to give you a week to sort out all the shit going on in your company. If we don't see any progress after a week, we're gonna release all the data publicly - just for fun.
And lastly, we're gonna keep leaking data, fuck you guys https://t.me/pathaonews
=======================
Target: Pathao - largest super-app in Bangladesh (ride-sharing, food delivery, courier/logistics). 10M+ registered users, operations in Bangladesh & Nepal. Pathao Ltd, Dhaka, pathao.com
Dataset: user_social_profiles table, production database pathao_api (social login module). 2,480,440 rows, 17 columns, CSV with header.
Columns: id,user_id,social_type,social_id,social_name,social_email,social_image,social_token,temp_token,social_sync,social_sync_at,is_social_sync_skip,verify_at,is_social_active,created,updated,deleted
What's inside:
- social_type 1 = Facebook, 2 = Apple Sign-In
- social_id: FB numeric UID / Apple private relay ID
- social_name: real full name as on Facebook
- social_email: linked email where filled
- social_image: direct FB profile picture URL
- social_token / temp_token: OAuth tokens captured at login
- user_id: joins against the 19M-row master users table (phone numbers) = FB UID to real name to phone number, full deanonymization chain
Sample (first 3 rows):
1,731158,1,5165807810127317,Md Shamiul Haque Chowdhury,,https://platform-lookaside.fbsbx.com/platform/profilepic/?asid=5165807810127317&height=50&width=50&ext=1616781687&hash=AeSw65U3dV5h3OulYBg,,,0,,0,1614189739,0,1614189687,1614189739,1614189777
2,731158,1,5165807810127317,Md Shamiul Haque Chowdhury,,https://platform-lookaside.fbsbx.com/platform/profilepic/?asid=5165807810127317&height=50&width=50&ext=1616787059&hash=AeS1NCmGP07BgqEc090,,,0,,0,1614189793,0,1614189793,1614195059,1614195233
3,731158,2,001563.ed88c11abbcc4edea40c0e3e5eada432.0020,,,,,,0,,0,1614189920,0,1614189877,1614189920,1614189959
Rows 1-2: same user, Facebook-linked (UID 5165807810127317, account created Feb 2021). Row 3: same user_id, Apple Sign-In relay ID.
Download: 470 MB zstd, unpacks to 1.1 GB CSV
https://gofile.io/d/8sKedCGZ
MD5: 13cee7f3294eaae3cf6bfaeae9ab23f6
Extract: zstd -d user_social_profiles.csv.zst
Coming next on https://t.me/pathaonews:
- users_full - 19M rows, phone/email/city/name
- driver_login_query_log - 32.7M rows, driver phone numbers
- wallet_pay_transaction_logs - 4M rows, payment flows
- pairing_code - 920K rows, phone + pairing codes
- hermes COD merchant ledger - 7M+ rows
One week. Clock's ticking.
First of all, fuck you guys - you're a bunch of useless idiots who have no value except for scamming your users every day. Second, you're lazy as fuck and good for nothing, only good at squeezing the life out of your riders.
So we've decided to give you a week to sort out all the shit going on in your company. If we don't see any progress after a week, we're gonna release all the data publicly - just for fun.
And lastly, we're gonna keep leaking data, fuck you guys https://t.me/pathaonews
=======================
Target: Pathao - largest super-app in Bangladesh (ride-sharing, food delivery, courier/logistics). 10M+ registered users, operations in Bangladesh & Nepal. Pathao Ltd, Dhaka, pathao.com
Dataset: user_social_profiles table, production database pathao_api (social login module). 2,480,440 rows, 17 columns, CSV with header.
Columns: id,user_id,social_type,social_id,social_name,social_email,social_image,social_token,temp_token,social_sync,social_sync_at,is_social_sync_skip,verify_at,is_social_active,created,updated,deleted
What's inside:
- social_type 1 = Facebook, 2 = Apple Sign-In
- social_id: FB numeric UID / Apple private relay ID
- social_name: real full name as on Facebook
- social_email: linked email where filled
- social_image: direct FB profile picture URL
- social_token / temp_token: OAuth tokens captured at login
- user_id: joins against the 19M-row master users table (phone numbers) = FB UID to real name to phone number, full deanonymization chain
Sample (first 3 rows):
1,731158,1,5165807810127317,Md Shamiul Haque Chowdhury,,https://platform-lookaside.fbsbx.com/platform/profilepic/?asid=5165807810127317&height=50&width=50&ext=1616781687&hash=AeSw65U3dV5h3OulYBg,,,0,,0,1614189739,0,1614189687,1614189739,1614189777
2,731158,1,5165807810127317,Md Shamiul Haque Chowdhury,,https://platform-lookaside.fbsbx.com/platform/profilepic/?asid=5165807810127317&height=50&width=50&ext=1616787059&hash=AeS1NCmGP07BgqEc090,,,0,,0,1614189793,0,1614189793,1614195059,1614195233
3,731158,2,001563.ed88c11abbcc4edea40c0e3e5eada432.0020,,,,,,0,,0,1614189920,0,1614189877,1614189920,1614189959
Rows 1-2: same user, Facebook-linked (UID 5165807810127317, account created Feb 2021). Row 3: same user_id, Apple Sign-In relay ID.
Download: 470 MB zstd, unpacks to 1.1 GB CSV
https://gofile.io/d/8sKedCGZ
MD5: 13cee7f3294eaae3cf6bfaeae9ab23f6
Extract: zstd -d user_social_profiles.csv.zst
Coming next on https://t.me/pathaonews:
- users_full - 19M rows, phone/email/city/name
- driver_login_query_log - 32.7M rows, driver phone numbers
- wallet_pay_transaction_logs - 4M rows, payment flows
- pairing_code - 920K rows, phone + pairing codes
- hermes COD merchant ledger - 7M+ rows
One week. Clock's ticking.
