cars.no — 148,288 Norwegian Citizens Exposed [Phone + Name + License Plate] 2026

Cartnet · 11-09-26, 01:43 AM

Still here?

MarkusTheGoat · 11-09-26, 01:59 AM

no way this is it

lsnebo9101 · 13-09-26, 07:30 AM

(07-08-26, 05:26 PM)exfilar Wrote:
About the leak

cars.no — a Norwegian B2B automotive SaaS ERP powering 500+ repair shops, dealerships, and parts wholesalers across Norway — left their entire production database wide open. Our proprietary 0day mass RTDB scanner caught it. No auth. No token. No referer check. Full read access to 315,435 customer service records spanning repair shop consent agreements, EU vehicle inspection notices, mechanic work orders, and service quotes. Every customer who ever gave consent to a repair shop using Cars Software is in this database.

Inside: 148,288 unique Norwegian mobile phone numbers, 166,524 unique customer full names, 73,581 unique vehicle license plates, 40,551 unique customer numbers, and 289 service centers with business phone numbers. Every record ties a real Norwegian citizen's name, phone number, and car registration to a specific repair shop. The notice table (80,789 records) contains automated EU control reminders with license plates — this database tells you exactly which cars are due for mandatory inspection, who owns them, and which shop services them.

Cars Software AS is a real Norwegian company — founded 2004, acquired by Hawk Infinity Software AS in October 2023 for NOK 56.5 million (~$5.2M). They process data for 500+ automotive businesses across Norway. Fleet operators like Oslo Taxibuss AS, Fredrikstad Kommune, Bergen Bilutleie AS, and Norsk Bilpool AS have their entire vehicle fleets mapped with names, phones, and plates.

Under GDPR Article 9, name + phone + license plate = unambiguously identifiable personal data. This is a 148,000-person GDPR nuclear event.

Date: 06.08.2026
Format: Full production database JSON export (148MB raw) + deep PII extraction
Consent Records: 112,639 (customer consent to repair shop data access)
Consent-2 Records: 119,744 (extended consent with service center mapping)
EU Control Notices: 80,789 (automated inspection reminders with license plates)
Repair Quotes: 1,761 (0 - 601,000 NOK, avg 7,635 NOK)
Mechanic Agreements: 48 (with work orders and job codes)
Unique Phone Numbers: 148,288 (100% Norwegian 8-digit mobile format)
Unique Customer Names: 166,524 (individuals + businesses)
Unique License Plates: 73,581 (AA12345 format — valid Norwegian registrations)
Unique Customer Numbers: 40,551
Service Centers: 289 repair shops with business phone numbers
Distributors: 35 region codes with volume data

Compromised Data Includes

cumobile · cuname · cuno · regid · dist · sename · sephone · amount · orderid · text · agreements · status · duration · created · expires

Affected Entities

Cars Software AS (cars.no) — Norwegian automotive SaaS, 500+ installations across Norway
Hawk Infinity Software AS (hawk.no) — parent company, acquired Cars in Oct 2023 for 56.5M NOK
148,288 Norwegian citizens — mobile phone numbers tied to full names and license plates
73,581 vehicles — registration IDs linked to owners and specific repair shops
289 Norwegian service centers — complete geographic map with business phone numbers
Oslo Taxibuss AS — taxi fleet operator, multiple vehicles exposed
Fredrikstad Kommune — municipal government fleet exposed
Bergen Bilutleie AS — car rental fleet exposed
Norsk Bilpool AS — vehicle pool operator exposed

Infrastructure Map

Production RTDB — PUBLIC, read, no auth Host: cars.no | Company: Cars Software AS | Fossveien 25, 3403 Lier, Norway Org 986 870 504 | LEI 636700U75UDSBES7T336 Acquired: Hawk Infinity Software AS (Oct 2023, 56.5M NOK) Revenue (LTM Q2-2023): 16.7M NOK | EBITDA: 7.1M NOK Top-level keys (6): consent, consent-2, notice, quote, info, mechanic - consent → 112,639 records: customer phone + name + plate mapped to repair shop - consent-2 → 119,744 records: extended consent, newer format - notice → 80,789 records: EU control reminders, automated SMS/email notices - quote → 1,761 records: repair quotes, amounts up to 601,000 NOK - info → 502 records: inspection results, order confirmations - mechanic → 48 records: mechanic agreements, work orders, job codes Data flow: Customer → Repair Shop → Cars Software ERP → exposed database

Live Access Status (August 6, 2026)

database read — LIVE (no auth, anonymous HTTP GET)
database write — UNTESTED (no write attempt made, but security rules likely permit based on read access pattern)
storage — not configured for this project

Sample Data — Individual Norwegian Car Owners

Dag Jakobsen | 41679234 | plates: BR43807 | cars.no (Cars Software AS) STEN ROGER MELLUM | 40400891 | plates: AA47766, AR82406, BP12345 | Slemmestad Bil AS, AUTOCO BÆRUM AS KARIANNE JUVERUD | 90828606 | plates: AA47766, AR70391, AR72080 | Romerike Autoservice AS EDWARD BACHE IVARSEN | 90090032 | plates: AX92692, BR43981, BR96725 | Kokstad Autosenter AS Hans Martin Skari-Hansen | 90097430 | plates: AA46186, AD80976, AD85917 | Autoservice AS RUBEN MJAASETH | 97195540 | plates: AJ66790, BP27950, BR20332 | Sandven Service AS, Kokstad Autosenter AS GEIR MYKLEBUST | 90891250 | plates: BD46145, BR25456, BR46113 | Enviro Bil Nesbru AS ASLE SIMENSEN | 92822773 | plates: AE16021, AR84036, AS37987 | Smart Bil AS, Autoteknikk Kolbotn AS FREDDY LØNSETH SKOGVOLL | 90683238 | plates: AX91946, BR90451, BS25501 | Auto 1 Elnesvågen AS FRODE GUNDERSEN | 91176991 | plates: AR90243, AS14636, AS32090 | Style Auto Moss AS, AUTOLAKK AS

Phone Format: Norwegian 8-digit mobile (100% — no international prefix mixing)
Name Format: Full legal names (first + last, some with middle names)
Plate Format: AA12345 Norwegian standard (two uppercase + five digits)

Sample Data — Corporate and Fleet Customers

OSLO TAXIBUSS AS | 93419125 | plates: AE24859, AX95130, BD44635 | Autoteknikk Kolbotn AS FREDRIKSTAD KOMMUNE | 48225632 | plates: AA51743, AD86947, AD93207 | Autoservice AS BERGEN BILUTLEIE AS | 99550472 | plates: BS70041, ST30870, ST91927 | Autotjenester AS NORSK BILPOOL AS | 98090923 | plates: AD92194, AJ63806, BD40997 | Skogfoss Bilverksted AS FERDINAND SERVICE AS | 92499895 | plates: BP61295, BR21364, BR44362 | Autotjenester AS Sportwagen As | 45209797 | plates: AD92666, AY20527, BD66707 | Style Auto AS, Vestby AUTODEALER.NO.AS | 91350306 | plates: AA58802, AE10723, AJ58203 | Autoteknikk Kolbotn AS Spectra Auto Østfold As | 97047694 | plates: AA62874, AE24886, AE36740 | Style Auto Moss AS

Sample Data — Auto Repair and Dealership Businesses

AUTOKLINIK | 93040807 | plates: AJ47796, AJ56022, AR93633 | Alversund Auto AS KOLBOTNBIL | 90114224 | plates: AA54107, AD89855, AD90190 | Autoteknikk Kolbotn AS A AUTOPARK AS | 94800800 | plates: AX87190, BP37614, BP58047 | Sørby Auto Style Auto AS | 91876430 | plates: AA53230, AE33081, AS23762 | Style Auto AS, Vestby Ryen Bil As | 90031637 | plates: AJ52698, AX73643, BD15646 | Autoteknikk Ryen AS Miltvedts Autoco AS | 90654755 | plates: AX95643, BD24908, BD41076 | Autoteknikk Ryen AS, Kolbotn BJERKE BIL AS | 90204637 | plates: AA51616, AR89646, BD54657 | Enviro Bil Nesbru AS

Sample Data — License Plates (73,581 total, verified real Norwegian registrations)

PP11111 · BD21036 · NV55300 · BP50939 · AR72080 · AA36096 · AA37862 · AA38151 AA39658 · AA40231 · AA40681 · AA40968 · AA41237 · AA41319 · AA41410 · AA41624 AA41640 · AA41696 · AA41730 · AA41820 · AA42439 · AA42504 · AA42511 · AA42512 AA42539 · AA42772 · AA46186 · AA47593 · AA47766 · AA48003 · AA51616 · AA51743 AA51785 · AA53230 · AA54107 · AA55140 · AA55409 · AA58802 · AA62016 · AA62874 BR43807 · BR43981 · BR46113 · BR90451 · BR96725 · BS25501 · BS40051 · BS70041

Sample Data — Norwegian Service Centers (289 total)

Cars Software AS | 32242070 — Lier (HQ) Smart Bil AS | 40041469, 90168717 — (multiple locations) Enviro Bil Nesbru AS | 90114704, 95032050, 95758134 — (Nesbru) Autoteknikk Kolbotn AS — (Kolbotn, Oslo metro) Autoteknikk Ryen AS — (Ryen, Oslo) Autotjenester AS — (Bergen region) Style Auto Moss AS — (Moss) AUTOCO BÆRUM AS | 67177100 — (Bærum) Stange Servicesenter AS | 91823821 — (Stange) Sandven Service AS | 95241533 — (Bergen) Aarnes Auto AS | 63900106 — (Aarnes) Alversund Auto AS | 56350015 — (Alversund) Husnes Pit-Stop Service AS | 95751084 — (Husnes) Aslam Bilservice AS | 64850085 — (Aslam) AUTOLAKK AS | 69262850 — auto paint/body shop chain

Sample Data — Repair Quotes

Quote 010251 — BR43807 — 315,055 NOK (~$29,000) — "Verksted tilbud for godkjenning" — cars.no Quote 010331 — 601,000 NOK (~$55,000) — "Verksted tilbud for godkjenning" — cars.no Range: 0 — 601,000 NOK | Average: 7,635 NOK | 1,761 quotes total Status: 1,200 pending | 561 accepted

Sample Data — EU Control Notices (80,789 total)

"Det er snart tid for EU-kontroll på Deres bil med registreringsnummer PP11111." (Translation: "It is soon time for EU inspection on your car with registration number PP11111.") — Automated SMS/email reminders connecting license plates to owner names and inspection deadlines

What's in the dump

· cars-production_rtdb.json — complete production database export (70.7MB) · cars_no_pii_records.json — full PII extraction (phone, name, plate, service center, 72MB) · cars_no_phone_numbers.txt — 148,288 Norwegian mobile numbers · cars_no_customer_names.txt — 166,524 customer names · cars_no_license_plates.txt — 73,581 Norwegian vehicle registrations · cars_no_service_centers.csv — 289 repair shops with phone numbers Total: 148MB raw / 24MB compressed (.zip)

Final word

This isn't a sophisticated exploit. This is a production database with security rules set to public — the equivalent of leaving a filing cabinet full of customer records on a public street in Oslo. Google sends automated "your database is insecure" warnings. For years. Someone at Cars Software AS or Hawk Infinity ignored them, or clicked "I'll fix it later" and never did.

The data is from 2016-2017 but these are Norwegian vehicles — average car age in Norway is 11 years. These plates are still on the road. These phone numbers are still active. These service centers are still operating. Every repair shop, every fleet operator, every individual car owner who ever gave consent through a Cars Software serviced shop is in this dump.

148,288 Norwegians just had their full names, phone numbers, and license plates dumped on the internet. Combined with the 289 service center phone numbers, an attacker has everything needed to run a Norway-wide auto repair phishing campaign with exact vehicle details. "Hei, dette er [SERVICE CENTER]. Det haster med EU-kontrollen på [LICENSE PLATE]. Vennligst bekreft time her: [link]."

cars.no is 8/26 from the CredHarvest V6 pipeline — hundreds of databases already acquired. More drops from the pipeline soon. Same tool. Different companies.

DOWNLOAD

Pentest Services Available

If you are looking for penetration testing and have targets to attack, we provide such services on the side. We use refined techniques with short turnaround times. Prices start from $2000 and up, depending on the target and scope.

DM me for inquiries: @~~exfilar~~

Leaked via CredHarvest V6 pipeline — @~~exfilar~~ | Drop from 06.08.2026 | Tool for sale $50k

~~hackboy~~ · 02-10-26, 01:07 PM

(07-08-26, 05:26 PM)exfilar Wrote:
About the leak

cars.no — a Norwegian B2B automotive SaaS ERP powering 500+ repair shops, dealerships, and parts wholesalers across Norway — left their entire production database wide open. Our proprietary 0day mass RTDB scanner caught it. No auth. No token. No referer check. Full read access to 315,435 customer service records spanning repair shop consent agreements, EU vehicle inspection notices, mechanic work orders, and service quotes. Every customer who ever gave consent to a repair shop using Cars Software is in this database.

Inside: 148,288 unique Norwegian mobile phone numbers, 166,524 unique customer full names, 73,581 unique vehicle license plates, 40,551 unique customer numbers, and 289 service centers with business phone numbers. Every record ties a real Norwegian citizen's name, phone number, and car registration to a specific repair shop. The notice table (80,789 records) contains automated EU control reminders with license plates — this database tells you exactly which cars are due for mandatory inspection, who owns them, and which shop services them.

Cars Software AS is a real Norwegian company — founded 2004, acquired by Hawk Infinity Software AS in October 2023 for NOK 56.5 million (~$5.2M). They process data for 500+ automotive businesses across Norway. Fleet operators like Oslo Taxibuss AS, Fredrikstad Kommune, Bergen Bilutleie AS, and Norsk Bilpool AS have their entire vehicle fleets mapped with names, phones, and plates.

Under GDPR Article 9, name + phone + license plate = unambiguously identifiable personal data. This is a 148,000-person GDPR nuclear event.

Date: 06.08.2026
Format: Full production database JSON export (148MB raw) + deep PII extraction
Consent Records: 112,639 (customer consent to repair shop data access)
Consent-2 Records: 119,744 (extended consent with service center mapping)
EU Control Notices: 80,789 (automated inspection reminders with license plates)
Repair Quotes: 1,761 (0 - 601,000 NOK, avg 7,635 NOK)
Mechanic Agreements: 48 (with work orders and job codes)
Unique Phone Numbers: 148,288 (100% Norwegian 8-digit mobile format)
Unique Customer Names: 166,524 (individuals + businesses)
Unique License Plates: 73,581 (AA12345 format — valid Norwegian registrations)
Unique Customer Numbers: 40,551
Service Centers: 289 repair shops with business phone numbers
Distributors: 35 region codes with volume data

Compromised Data Includes

cumobile · cuname · cuno · regid · dist · sename · sephone · amount · orderid · text · agreements · status · duration · created · expires

Affected Entities

Cars Software AS (cars.no) — Norwegian automotive SaaS, 500+ installations across Norway
Hawk Infinity Software AS (hawk.no) — parent company, acquired Cars in Oct 2023 for 56.5M NOK
148,288 Norwegian citizens — mobile phone numbers tied to full names and license plates
73,581 vehicles — registration IDs linked to owners and specific repair shops
289 Norwegian service centers — complete geographic map with business phone numbers
Oslo Taxibuss AS — taxi fleet operator, multiple vehicles exposed
Fredrikstad Kommune — municipal government fleet exposed
Bergen Bilutleie AS — car rental fleet exposed
Norsk Bilpool AS — vehicle pool operator exposed

Infrastructure Map

Production RTDB — PUBLIC, read, no auth Host: cars.no | Company: Cars Software AS | Fossveien 25, 3403 Lier, Norway Org 986 870 504 | LEI 636700U75UDSBES7T336 Acquired: Hawk Infinity Software AS (Oct 2023, 56.5M NOK) Revenue (LTM Q2-2023): 16.7M NOK | EBITDA: 7.1M NOK Top-level keys (6): consent, consent-2, notice, quote, info, mechanic - consent → 112,639 records: customer phone + name + plate mapped to repair shop - consent-2 → 119,744 records: extended consent, newer format - notice → 80,789 records: EU control reminders, automated SMS/email notices - quote → 1,761 records: repair quotes, amounts up to 601,000 NOK - info → 502 records: inspection results, order confirmations - mechanic → 48 records: mechanic agreements, work orders, job codes Data flow: Customer → Repair Shop → Cars Software ERP → exposed database

Live Access Status (August 6, 2026)

database read — LIVE (no auth, anonymous HTTP GET)
database write — UNTESTED (no write attempt made, but security rules likely permit based on read access pattern)
storage — not configured for this project

Sample Data — Individual Norwegian Car Owners

Dag Jakobsen | 41679234 | plates: BR43807 | cars.no (Cars Software AS) STEN ROGER MELLUM | 40400891 | plates: AA47766, AR82406, BP12345 | Slemmestad Bil AS, AUTOCO BÆRUM AS KARIANNE JUVERUD | 90828606 | plates: AA47766, AR70391, AR72080 | Romerike Autoservice AS EDWARD BACHE IVARSEN | 90090032 | plates: AX92692, BR43981, BR96725 | Kokstad Autosenter AS Hans Martin Skari-Hansen | 90097430 | plates: AA46186, AD80976, AD85917 | Autoservice AS RUBEN MJAASETH | 97195540 | plates: AJ66790, BP27950, BR20332 | Sandven Service AS, Kokstad Autosenter AS GEIR MYKLEBUST | 90891250 | plates: BD46145, BR25456, BR46113 | Enviro Bil Nesbru AS ASLE SIMENSEN | 92822773 | plates: AE16021, AR84036, AS37987 | Smart Bil AS, Autoteknikk Kolbotn AS FREDDY LØNSETH SKOGVOLL | 90683238 | plates: AX91946, BR90451, BS25501 | Auto 1 Elnesvågen AS FRODE GUNDERSEN | 91176991 | plates: AR90243, AS14636, AS32090 | Style Auto Moss AS, AUTOLAKK AS

Phone Format: Norwegian 8-digit mobile (100% — no international prefix mixing)
Name Format: Full legal names (first + last, some with middle names)
Plate Format: AA12345 Norwegian standard (two uppercase + five digits)

Sample Data — Corporate and Fleet Customers

OSLO TAXIBUSS AS | 93419125 | plates: AE24859, AX95130, BD44635 | Autoteknikk Kolbotn AS FREDRIKSTAD KOMMUNE | 48225632 | plates: AA51743, AD86947, AD93207 | Autoservice AS BERGEN BILUTLEIE AS | 99550472 | plates: BS70041, ST30870, ST91927 | Autotjenester AS NORSK BILPOOL AS | 98090923 | plates: AD92194, AJ63806, BD40997 | Skogfoss Bilverksted AS FERDINAND SERVICE AS | 92499895 | plates: BP61295, BR21364, BR44362 | Autotjenester AS Sportwagen As | 45209797 | plates: AD92666, AY20527, BD66707 | Style Auto AS, Vestby AUTODEALER.NO.AS | 91350306 | plates: AA58802, AE10723, AJ58203 | Autoteknikk Kolbotn AS Spectra Auto Østfold As | 97047694 | plates: AA62874, AE24886, AE36740 | Style Auto Moss AS

Sample Data — Auto Repair and Dealership Businesses

AUTOKLINIK | 93040807 | plates: AJ47796, AJ56022, AR93633 | Alversund Auto AS KOLBOTNBIL | 90114224 | plates: AA54107, AD89855, AD90190 | Autoteknikk Kolbotn AS A AUTOPARK AS | 94800800 | plates: AX87190, BP37614, BP58047 | Sørby Auto Style Auto AS | 91876430 | plates: AA53230, AE33081, AS23762 | Style Auto AS, Vestby Ryen Bil As | 90031637 | plates: AJ52698, AX73643, BD15646 | Autoteknikk Ryen AS Miltvedts Autoco AS | 90654755 | plates: AX95643, BD24908, BD41076 | Autoteknikk Ryen AS, Kolbotn BJERKE BIL AS | 90204637 | plates: AA51616, AR89646, BD54657 | Enviro Bil Nesbru AS

Sample Data — License Plates (73,581 total, verified real Norwegian registrations)

PP11111 · BD21036 · NV55300 · BP50939 · AR72080 · AA36096 · AA37862 · AA38151 AA39658 · AA40231 · AA40681 · AA40968 · AA41237 · AA41319 · AA41410 · AA41624 AA41640 · AA41696 · AA41730 · AA41820 · AA42439 · AA42504 · AA42511 · AA42512 AA42539 · AA42772 · AA46186 · AA47593 · AA47766 · AA48003 · AA51616 · AA51743 AA51785 · AA53230 · AA54107 · AA55140 · AA55409 · AA58802 · AA62016 · AA62874 BR43807 · BR43981 · BR46113 · BR90451 · BR96725 · BS25501 · BS40051 · BS70041

Sample Data — Norwegian Service Centers (289 total)

Cars Software AS | 32242070 — Lier (HQ) Smart Bil AS | 40041469, 90168717 — (multiple locations) Enviro Bil Nesbru AS | 90114704, 95032050, 95758134 — (Nesbru) Autoteknikk Kolbotn AS — (Kolbotn, Oslo metro) Autoteknikk Ryen AS — (Ryen, Oslo) Autotjenester AS — (Bergen region) Style Auto Moss AS — (Moss) AUTOCO BÆRUM AS | 67177100 — (Bærum) Stange Servicesenter AS | 91823821 — (Stange) Sandven Service AS | 95241533 — (Bergen) Aarnes Auto AS | 63900106 — (Aarnes) Alversund Auto AS | 56350015 — (Alversund) Husnes Pit-Stop Service AS | 95751084 — (Husnes) Aslam Bilservice AS | 64850085 — (Aslam) AUTOLAKK AS | 69262850 — auto paint/body shop chain

Sample Data — Repair Quotes

Quote 010251 — BR43807 — 315,055 NOK (~$29,000) — "Verksted tilbud for godkjenning" — cars.no Quote 010331 — 601,000 NOK (~$55,000) — "Verksted tilbud for godkjenning" — cars.no Range: 0 — 601,000 NOK | Average: 7,635 NOK | 1,761 quotes total Status: 1,200 pending | 561 accepted

Sample Data — EU Control Notices (80,789 total)

"Det er snart tid for EU-kontroll på Deres bil med registreringsnummer PP11111." (Translation: "It is soon time for EU inspection on your car with registration number PP11111.") — Automated SMS/email reminders connecting license plates to owner names and inspection deadlines

What's in the dump

· cars-production_rtdb.json — complete production database export (70.7MB) · cars_no_pii_records.json — full PII extraction (phone, name, plate, service center, 72MB) · cars_no_phone_numbers.txt — 148,288 Norwegian mobile numbers · cars_no_customer_names.txt — 166,524 customer names · cars_no_license_plates.txt — 73,581 Norwegian vehicle registrations · cars_no_service_centers.csv — 289 repair shops with phone numbers Total: 148MB raw / 24MB compressed (.zip)

Final word

This isn't a sophisticated exploit. This is a production database with security rules set to public — the equivalent of leaving a filing cabinet full of customer records on a public street in Oslo. Google sends automated "your database is insecure" warnings. For years. Someone at Cars Software AS or Hawk Infinity ignored them, or clicked "I'll fix it later" and never did.

The data is from 2016-2017 but these are Norwegian vehicles — average car age in Norway is 11 years. These plates are still on the road. These phone numbers are still active. These service centers are still operating. Every repair shop, every fleet operator, every individual car owner who ever gave consent through a Cars Software serviced shop is in this dump.

148,288 Norwegians just had their full names, phone numbers, and license plates dumped on the internet. Combined with the 289 service center phone numbers, an attacker has everything needed to run a Norway-wide auto repair phishing campaign with exact vehicle details. "Hei, dette er [SERVICE CENTER]. Det haster med EU-kontrollen på [LICENSE PLATE]. Vennligst bekreft time her: [link]."

cars.no is 8/26 from the CredHarvest V6 pipeline — hundreds of databases already acquired. More drops from the pipeline soon. Same tool. Different companies.

DOWNLOAD

Pentest Services Available

If you are looking for penetration testing and have targets to attack, we provide such services on the side. We use refined techniques with short turnaround times. Prices start from $2000 and up, depending on the target and scope.

DM me for inquiries: @~~exfilar~~

Leaked via CredHarvest V6 pipeline — @~~exfilar~~ | Drop from 06.08.2026 | Tool for sale $50k

good work

goonix · 02-10-26, 01:40 PM

which geos?

memhbGsa · 09-10-26, 08:27 PM

(07-08-26, 05:26 PM)exfilar Wrote:
About the leak

cars.no — a Norwegian B2B automotive SaaS ERP powering 500+ repair shops, dealerships, and parts wholesalers across Norway — left their entire production database wide open. Our proprietary 0day mass RTDB scanner caught it. No auth. No token. No referer check. Full read access to 315,435 customer service records spanning repair shop consent agreements, EU vehicle inspection notices, mechanic work orders, and service quotes. Every customer who ever gave consent to a repair shop using Cars Software is in this database.

Inside: 148,288 unique Norwegian mobile phone numbers, 166,524 unique customer full names, 73,581 unique vehicle license plates, 40,551 unique customer numbers, and 289 service centers with business phone numbers. Every record ties a real Norwegian citizen's name, phone number, and car registration to a specific repair shop. The notice table (80,789 records) contains automated EU control reminders with license plates — this database tells you exactly which cars are due for mandatory inspection, who owns them, and which shop services them.

Cars Software AS is a real Norwegian company — founded 2004, acquired by Hawk Infinity Software AS in October 2023 for NOK 56.5 million (~$5.2M). They process data for 500+ automotive businesses across Norway. Fleet operators like Oslo Taxibuss AS, Fredrikstad Kommune, Bergen Bilutleie AS, and Norsk Bilpool AS have their entire vehicle fleets mapped with names, phones, and plates.

Under GDPR Article 9, name + phone + license plate = unambiguously identifiable personal data. This is a 148,000-person GDPR nuclear event.

Date: 06.08.2026
Format: Full production database JSON export (148MB raw) + deep PII extraction
Consent Records: 112,639 (customer consent to repair shop data access)
Consent-2 Records: 119,744 (extended consent with service center mapping)
EU Control Notices: 80,789 (automated inspection reminders with license plates)
Repair Quotes: 1,761 (0 - 601,000 NOK, avg 7,635 NOK)
Mechanic Agreements: 48 (with work orders and job codes)
Unique Phone Numbers: 148,288 (100% Norwegian 8-digit mobile format)
Unique Customer Names: 166,524 (individuals + businesses)
Unique License Plates: 73,581 (AA12345 format — valid Norwegian registrations)
Unique Customer Numbers: 40,551
Service Centers: 289 repair shops with business phone numbers
Distributors: 35 region codes with volume data

Compromised Data Includes

cumobile · cuname · cuno · regid · dist · sename · sephone · amount · orderid · text · agreements · status · duration · created · expires

Affected Entities

Cars Software AS (cars.no) — Norwegian automotive SaaS, 500+ installations across Norway
Hawk Infinity Software AS (hawk.no) — parent company, acquired Cars in Oct 2023 for 56.5M NOK
148,288 Norwegian citizens — mobile phone numbers tied to full names and license plates
73,581 vehicles — registration IDs linked to owners and specific repair shops
289 Norwegian service centers — complete geographic map with business phone numbers
Oslo Taxibuss AS — taxi fleet operator, multiple vehicles exposed
Fredrikstad Kommune — municipal government fleet exposed
Bergen Bilutleie AS — car rental fleet exposed
Norsk Bilpool AS — vehicle pool operator exposed

Infrastructure Map

Production RTDB — PUBLIC, read, no auth Host: cars.no | Company: Cars Software AS | Fossveien 25, 3403 Lier, Norway Org 986 870 504 | LEI 636700U75UDSBES7T336 Acquired: Hawk Infinity Software AS (Oct 2023, 56.5M NOK) Revenue (LTM Q2-2023): 16.7M NOK | EBITDA: 7.1M NOK Top-level keys (6): consent, consent-2, notice, quote, info, mechanic - consent → 112,639 records: customer phone + name + plate mapped to repair shop - consent-2 → 119,744 records: extended consent, newer format - notice → 80,789 records: EU control reminders, automated SMS/email notices - quote → 1,761 records: repair quotes, amounts up to 601,000 NOK - info → 502 records: inspection results, order confirmations - mechanic → 48 records: mechanic agreements, work orders, job codes Data flow: Customer → Repair Shop → Cars Software ERP → exposed database

Live Access Status (August 6, 2026)

database read — LIVE (no auth, anonymous HTTP GET)
database write — UNTESTED (no write attempt made, but security rules likely permit based on read access pattern)
storage — not configured for this project

Sample Data — Individual Norwegian Car Owners

Dag Jakobsen | 41679234 | plates: BR43807 | cars.no (Cars Software AS) STEN ROGER MELLUM | 40400891 | plates: AA47766, AR82406, BP12345 | Slemmestad Bil AS, AUTOCO BÆRUM AS KARIANNE JUVERUD | 90828606 | plates: AA47766, AR70391, AR72080 | Romerike Autoservice AS EDWARD BACHE IVARSEN | 90090032 | plates: AX92692, BR43981, BR96725 | Kokstad Autosenter AS Hans Martin Skari-Hansen | 90097430 | plates: AA46186, AD80976, AD85917 | Autoservice AS RUBEN MJAASETH | 97195540 | plates: AJ66790, BP27950, BR20332 | Sandven Service AS, Kokstad Autosenter AS GEIR MYKLEBUST | 90891250 | plates: BD46145, BR25456, BR46113 | Enviro Bil Nesbru AS ASLE SIMENSEN | 92822773 | plates: AE16021, AR84036, AS37987 | Smart Bil AS, Autoteknikk Kolbotn AS FREDDY LØNSETH SKOGVOLL | 90683238 | plates: AX91946, BR90451, BS25501 | Auto 1 Elnesvågen AS FRODE GUNDERSEN | 91176991 | plates: AR90243, AS14636, AS32090 | Style Auto Moss AS, AUTOLAKK AS

Phone Format: Norwegian 8-digit mobile (100% — no international prefix mixing)
Name Format: Full legal names (first + last, some with middle names)
Plate Format: AA12345 Norwegian standard (two uppercase + five digits)

Sample Data — Corporate and Fleet Customers

OSLO TAXIBUSS AS | 93419125 | plates: AE24859, AX95130, BD44635 | Autoteknikk Kolbotn AS FREDRIKSTAD KOMMUNE | 48225632 | plates: AA51743, AD86947, AD93207 | Autoservice AS BERGEN BILUTLEIE AS | 99550472 | plates: BS70041, ST30870, ST91927 | Autotjenester AS NORSK BILPOOL AS | 98090923 | plates: AD92194, AJ63806, BD40997 | Skogfoss Bilverksted AS FERDINAND SERVICE AS | 92499895 | plates: BP61295, BR21364, BR44362 | Autotjenester AS Sportwagen As | 45209797 | plates: AD92666, AY20527, BD66707 | Style Auto AS, Vestby AUTODEALER.NO.AS | 91350306 | plates: AA58802, AE10723, AJ58203 | Autoteknikk Kolbotn AS Spectra Auto Østfold As | 97047694 | plates: AA62874, AE24886, AE36740 | Style Auto Moss AS

Sample Data — Auto Repair and Dealership Businesses

AUTOKLINIK | 93040807 | plates: AJ47796, AJ56022, AR93633 | Alversund Auto AS KOLBOTNBIL | 90114224 | plates: AA54107, AD89855, AD90190 | Autoteknikk Kolbotn AS A AUTOPARK AS | 94800800 | plates: AX87190, BP37614, BP58047 | Sørby Auto Style Auto AS | 91876430 | plates: AA53230, AE33081, AS23762 | Style Auto AS, Vestby Ryen Bil As | 90031637 | plates: AJ52698, AX73643, BD15646 | Autoteknikk Ryen AS Miltvedts Autoco AS | 90654755 | plates: AX95643, BD24908, BD41076 | Autoteknikk Ryen AS, Kolbotn BJERKE BIL AS | 90204637 | plates: AA51616, AR89646, BD54657 | Enviro Bil Nesbru AS

Sample Data — License Plates (73,581 total, verified real Norwegian registrations)

PP11111 · BD21036 · NV55300 · BP50939 · AR72080 · AA36096 · AA37862 · AA38151 AA39658 · AA40231 · AA40681 · AA40968 · AA41237 · AA41319 · AA41410 · AA41624 AA41640 · AA41696 · AA41730 · AA41820 · AA42439 · AA42504 · AA42511 · AA42512 AA42539 · AA42772 · AA46186 · AA47593 · AA47766 · AA48003 · AA51616 · AA51743 AA51785 · AA53230 · AA54107 · AA55140 · AA55409 · AA58802 · AA62016 · AA62874 BR43807 · BR43981 · BR46113 · BR90451 · BR96725 · BS25501 · BS40051 · BS70041

Sample Data — Norwegian Service Centers (289 total)

Cars Software AS | 32242070 — Lier (HQ) Smart Bil AS | 40041469, 90168717 — (multiple locations) Enviro Bil Nesbru AS | 90114704, 95032050, 95758134 — (Nesbru) Autoteknikk Kolbotn AS — (Kolbotn, Oslo metro) Autoteknikk Ryen AS — (Ryen, Oslo) Autotjenester AS — (Bergen region) Style Auto Moss AS — (Moss) AUTOCO BÆRUM AS | 67177100 — (Bærum) Stange Servicesenter AS | 91823821 — (Stange) Sandven Service AS | 95241533 — (Bergen) Aarnes Auto AS | 63900106 — (Aarnes) Alversund Auto AS | 56350015 — (Alversund) Husnes Pit-Stop Service AS | 95751084 — (Husnes) Aslam Bilservice AS | 64850085 — (Aslam) AUTOLAKK AS | 69262850 — auto paint/body shop chain

Sample Data — Repair Quotes

Quote 010251 — BR43807 — 315,055 NOK (~$29,000) — "Verksted tilbud for godkjenning" — cars.no Quote 010331 — 601,000 NOK (~$55,000) — "Verksted tilbud for godkjenning" — cars.no Range: 0 — 601,000 NOK | Average: 7,635 NOK | 1,761 quotes total Status: 1,200 pending | 561 accepted

Sample Data — EU Control Notices (80,789 total)

"Det er snart tid for EU-kontroll på Deres bil med registreringsnummer PP11111." (Translation: "It is soon time for EU inspection on your car with registration number PP11111.") — Automated SMS/email reminders connecting license plates to owner names and inspection deadlines

What's in the dump

· cars-production_rtdb.json — complete production database export (70.7MB) · cars_no_pii_records.json — full PII extraction (phone, name, plate, service center, 72MB) · cars_no_phone_numbers.txt — 148,288 Norwegian mobile numbers · cars_no_customer_names.txt — 166,524 customer names · cars_no_license_plates.txt — 73,581 Norwegian vehicle registrations · cars_no_service_centers.csv — 289 repair shops with phone numbers Total: 148MB raw / 24MB compressed (.zip)

Final word

This isn't a sophisticated exploit. This is a production database with security rules set to public — the equivalent of leaving a filing cabinet full of customer records on a public street in Oslo. Google sends automated "your database is insecure" warnings. For years. Someone at Cars Software AS or Hawk Infinity ignored them, or clicked "I'll fix it later" and never did.

The data is from 2016-2017 but these are Norwegian vehicles — average car age in Norway is 11 years. These plates are still on the road. These phone numbers are still active. These service centers are still operating. Every repair shop, every fleet operator, every individual car owner who ever gave consent through a Cars Software serviced shop is in this dump.

148,288 Norwegians just had their full names, phone numbers, and license plates dumped on the internet. Combined with the 289 service center phone numbers, an attacker has everything needed to run a Norway-wide auto repair phishing campaign with exact vehicle details. "Hei, dette er [SERVICE CENTER]. Det haster med EU-kontrollen på [LICENSE PLATE]. Vennligst bekreft time her: [link]."

cars.no is 8/26 from the CredHarvest V6 pipeline — hundreds of databases already acquired. More drops from the pipeline soon. Same tool. Different companies.

DOWNLOAD

Pentest Services Available

If you are looking for penetration testing and have targets to attack, we provide such services on the side. We use refined techniques with short turnaround times. Prices start from $2000 and up, depending on the target and scope.

DM me for inquiries: @~~exfilar~~

Leaked via CredHarvest V6 pipeline — @~~exfilar~~ | Drop from 06.08.2026 | Tool for sale $50k

really fuckming hope its still up fuck norway

xabiweg274 · 10-10-26, 12:47 AM

Danke

(07-08-26, 05:26 PM)exfilar Wrote:
About the leak

cars.no — a Norwegian B2B automotive SaaS ERP powering 500+ repair shops, dealerships, and parts wholesalers across Norway — left their entire production database wide open. Our proprietary 0day mass RTDB scanner caught it. No auth. No token. No referer check. Full read access to 315,435 customer service records spanning repair shop consent agreements, EU vehicle inspection notices, mechanic work orders, and service quotes. Every customer who ever gave consent to a repair shop using Cars Software is in this database.

Inside: 148,288 unique Norwegian mobile phone numbers, 166,524 unique customer full names, 73,581 unique vehicle license plates, 40,551 unique customer numbers, and 289 service centers with business phone numbers. Every record ties a real Norwegian citizen's name, phone number, and car registration to a specific repair shop. The notice table (80,789 records) contains automated EU control reminders with license plates — this database tells you exactly which cars are due for mandatory inspection, who owns them, and which shop services them.

Cars Software AS is a real Norwegian company — founded 2004, acquired by Hawk Infinity Software AS in October 2023 for NOK 56.5 million (~$5.2M). They process data for 500+ automotive businesses across Norway. Fleet operators like Oslo Taxibuss AS, Fredrikstad Kommune, Bergen Bilutleie AS, and Norsk Bilpool AS have their entire vehicle fleets mapped with names, phones, and plates.

Under GDPR Article 9, name + phone + license plate = unambiguously identifiable personal data. This is a 148,000-person GDPR nuclear event.

Date: 06.08.2026
Format: Full production database JSON export (148MB raw) + deep PII extraction
Consent Records: 112,639 (customer consent to repair shop data access)
Consent-2 Records: 119,744 (extended consent with service center mapping)
EU Control Notices: 80,789 (automated inspection reminders with license plates)
Repair Quotes: 1,761 (0 - 601,000 NOK, avg 7,635 NOK)
Mechanic Agreements: 48 (with work orders and job codes)
Unique Phone Numbers: 148,288 (100% Norwegian 8-digit mobile format)
Unique Customer Names: 166,524 (individuals + businesses)
Unique License Plates: 73,581 (AA12345 format — valid Norwegian registrations)
Unique Customer Numbers: 40,551
Service Centers: 289 repair shops with business phone numbers
Distributors: 35 region codes with volume data

Compromised Data Includes

cumobile · cuname · cuno · regid · dist · sename · sephone · amount · orderid · text · agreements · status · duration · created · expires

Affected Entities

Cars Software AS (cars.no) — Norwegian automotive SaaS, 500+ installations across Norway
Hawk Infinity Software AS (hawk.no) — parent company, acquired Cars in Oct 2023 for 56.5M NOK
148,288 Norwegian citizens — mobile phone numbers tied to full names and license plates
73,581 vehicles — registration IDs linked to owners and specific repair shops
289 Norwegian service centers — complete geographic map with business phone numbers
Oslo Taxibuss AS — taxi fleet operator, multiple vehicles exposed
Fredrikstad Kommune — municipal government fleet exposed
Bergen Bilutleie AS — car rental fleet exposed
Norsk Bilpool AS — vehicle pool operator exposed

Infrastructure Map

Production RTDB — PUBLIC, read, no auth Host: cars.no | Company: Cars Software AS | Fossveien 25, 3403 Lier, Norway Org 986 870 504 | LEI 636700U75UDSBES7T336 Acquired: Hawk Infinity Software AS (Oct 2023, 56.5M NOK) Revenue (LTM Q2-2023): 16.7M NOK | EBITDA: 7.1M NOK Top-level keys (6): consent, consent-2, notice, quote, info, mechanic - consent → 112,639 records: customer phone + name + plate mapped to repair shop - consent-2 → 119,744 records: extended consent, newer format - notice → 80,789 records: EU control reminders, automated SMS/email notices - quote → 1,761 records: repair quotes, amounts up to 601,000 NOK - info → 502 records: inspection results, order confirmations - mechanic → 48 records: mechanic agreements, work orders, job codes Data flow: Customer → Repair Shop → Cars Software ERP → exposed database

Live Access Status (August 6, 2026)

database read — LIVE (no auth, anonymous HTTP GET)
database write — UNTESTED (no write attempt made, but security rules likely permit based on read access pattern)
storage — not configured for this project

Sample Data — Individual Norwegian Car Owners

Dag Jakobsen | 41679234 | plates: BR43807 | cars.no (Cars Software AS) STEN ROGER MELLUM | 40400891 | plates: AA47766, AR82406, BP12345 | Slemmestad Bil AS, AUTOCO BÆRUM AS KARIANNE JUVERUD | 90828606 | plates: AA47766, AR70391, AR72080 | Romerike Autoservice AS EDWARD BACHE IVARSEN | 90090032 | plates: AX92692, BR43981, BR96725 | Kokstad Autosenter AS Hans Martin Skari-Hansen | 90097430 | plates: AA46186, AD80976, AD85917 | Autoservice AS RUBEN MJAASETH | 97195540 | plates: AJ66790, BP27950, BR20332 | Sandven Service AS, Kokstad Autosenter AS GEIR MYKLEBUST | 90891250 | plates: BD46145, BR25456, BR46113 | Enviro Bil Nesbru AS ASLE SIMENSEN | 92822773 | plates: AE16021, AR84036, AS37987 | Smart Bil AS, Autoteknikk Kolbotn AS FREDDY LØNSETH SKOGVOLL | 90683238 | plates: AX91946, BR90451, BS25501 | Auto 1 Elnesvågen AS FRODE GUNDERSEN | 91176991 | plates: AR90243, AS14636, AS32090 | Style Auto Moss AS, AUTOLAKK AS

Phone Format: Norwegian 8-digit mobile (100% — no international prefix mixing)
Name Format: Full legal names (first + last, some with middle names)
Plate Format: AA12345 Norwegian standard (two uppercase + five digits)

Sample Data — Corporate and Fleet Customers

OSLO TAXIBUSS AS | 93419125 | plates: AE24859, AX95130, BD44635 | Autoteknikk Kolbotn AS FREDRIKSTAD KOMMUNE | 48225632 | plates: AA51743, AD86947, AD93207 | Autoservice AS BERGEN BILUTLEIE AS | 99550472 | plates: BS70041, ST30870, ST91927 | Autotjenester AS NORSK BILPOOL AS | 98090923 | plates: AD92194, AJ63806, BD40997 | Skogfoss Bilverksted AS FERDINAND SERVICE AS | 92499895 | plates: BP61295, BR21364, BR44362 | Autotjenester AS Sportwagen As | 45209797 | plates: AD92666, AY20527, BD66707 | Style Auto AS, Vestby AUTODEALER.NO.AS | 91350306 | plates: AA58802, AE10723, AJ58203 | Autoteknikk Kolbotn AS Spectra Auto Østfold As | 97047694 | plates: AA62874, AE24886, AE36740 | Style Auto Moss AS

Sample Data — Auto Repair and Dealership Businesses

AUTOKLINIK | 93040807 | plates: AJ47796, AJ56022, AR93633 | Alversund Auto AS KOLBOTNBIL | 90114224 | plates: AA54107, AD89855, AD90190 | Autoteknikk Kolbotn AS A AUTOPARK AS | 94800800 | plates: AX87190, BP37614, BP58047 | Sørby Auto Style Auto AS | 91876430 | plates: AA53230, AE33081, AS23762 | Style Auto AS, Vestby Ryen Bil As | 90031637 | plates: AJ52698, AX73643, BD15646 | Autoteknikk Ryen AS Miltvedts Autoco AS | 90654755 | plates: AX95643, BD24908, BD41076 | Autoteknikk Ryen AS, Kolbotn BJERKE BIL AS | 90204637 | plates: AA51616, AR89646, BD54657 | Enviro Bil Nesbru AS

Sample Data — License Plates (73,581 total, verified real Norwegian registrations)

PP11111 · BD21036 · NV55300 · BP50939 · AR72080 · AA36096 · AA37862 · AA38151 AA39658 · AA40231 · AA40681 · AA40968 · AA41237 · AA41319 · AA41410 · AA41624 AA41640 · AA41696 · AA41730 · AA41820 · AA42439 · AA42504 · AA42511 · AA42512 AA42539 · AA42772 · AA46186 · AA47593 · AA47766 · AA48003 · AA51616 · AA51743 AA51785 · AA53230 · AA54107 · AA55140 · AA55409 · AA58802 · AA62016 · AA62874 BR43807 · BR43981 · BR46113 · BR90451 · BR96725 · BS25501 · BS40051 · BS70041

Sample Data — Norwegian Service Centers (289 total)

Cars Software AS | 32242070 — Lier (HQ) Smart Bil AS | 40041469, 90168717 — (multiple locations) Enviro Bil Nesbru AS | 90114704, 95032050, 95758134 — (Nesbru) Autoteknikk Kolbotn AS — (Kolbotn, Oslo metro) Autoteknikk Ryen AS — (Ryen, Oslo) Autotjenester AS — (Bergen region) Style Auto Moss AS — (Moss) AUTOCO BÆRUM AS | 67177100 — (Bærum) Stange Servicesenter AS | 91823821 — (Stange) Sandven Service AS | 95241533 — (Bergen) Aarnes Auto AS | 63900106 — (Aarnes) Alversund Auto AS | 56350015 — (Alversund) Husnes Pit-Stop Service AS | 95751084 — (Husnes) Aslam Bilservice AS | 64850085 — (Aslam) AUTOLAKK AS | 69262850 — auto paint/body shop chain

Sample Data — Repair Quotes

Quote 010251 — BR43807 — 315,055 NOK (~$29,000) — "Verksted tilbud for godkjenning" — cars.no Quote 010331 — 601,000 NOK (~$55,000) — "Verksted tilbud for godkjenning" — cars.no Range: 0 — 601,000 NOK | Average: 7,635 NOK | 1,761 quotes total Status: 1,200 pending | 561 accepted

Sample Data — EU Control Notices (80,789 total)

"Det er snart tid for EU-kontroll på Deres bil med registreringsnummer PP11111." (Translation: "It is soon time for EU inspection on your car with registration number PP11111.") — Automated SMS/email reminders connecting license plates to owner names and inspection deadlines

What's in the dump

· cars-production_rtdb.json — complete production database export (70.7MB) · cars_no_pii_records.json — full PII extraction (phone, name, plate, service center, 72MB) · cars_no_phone_numbers.txt — 148,288 Norwegian mobile numbers · cars_no_customer_names.txt — 166,524 customer names · cars_no_license_plates.txt — 73,581 Norwegian vehicle registrations · cars_no_service_centers.csv — 289 repair shops with phone numbers Total: 148MB raw / 24MB compressed (.zip)

Final word

This isn't a sophisticated exploit. This is a production database with security rules set to public — the equivalent of leaving a filing cabinet full of customer records on a public street in Oslo. Google sends automated "your database is insecure" warnings. For years. Someone at Cars Software AS or Hawk Infinity ignored them, or clicked "I'll fix it later" and never did.

The data is from 2016-2017 but these are Norwegian vehicles — average car age in Norway is 11 years. These plates are still on the road. These phone numbers are still active. These service centers are still operating. Every repair shop, every fleet operator, every individual car owner who ever gave consent through a Cars Software serviced shop is in this dump.

148,288 Norwegians just had their full names, phone numbers, and license plates dumped on the internet. Combined with the 289 service center phone numbers, an attacker has everything needed to run a Norway-wide auto repair phishing campaign with exact vehicle details. "Hei, dette er [SERVICE CENTER]. Det haster med EU-kontrollen på [LICENSE PLATE]. Vennligst bekreft time her: [link]."

cars.no is 8/26 from the CredHarvest V6 pipeline — hundreds of databases already acquired. More drops from the pipeline soon. Same tool. Different companies.

DOWNLOAD

Pentest Services Available

If you are looking for penetration testing and have targets to attack, we provide such services on the side. We use refined techniques with short turnaround times. Prices start from $2000 and up, depending on the target and scope.

DM me for inquiries: @~~exfilar~~

Leaked via CredHarvest V6 pipeline — @~~exfilar~~ | Drop from 06.08.2026 | Tool for sale $50k

Anttroia13 · 14-10-26, 08:20 PM

great work

amirserros · 15-10-26, 12:36 AM

thy brothers

Genel · 4 minutes ago

Thanks, taking a look at this.
Thanks, taking a look at this.