05-06-25, 04:27 PM
![[Image: k2_items_src_34a43e4b26abe2aa9a1cced6f8251818.jpg]](https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fprnoticias.com%2Fwp-content%2Fuploads%2F2017%2F07%2Fk2_items_src_34a43e4b26abe2aa9a1cced6f8251818.jpg)
After many days I have exfiltrated sensitive data from Weguest.
The initial entry point was a from a platform that Weguest and other rental management companies uses (bad API configuration)
The dataset covers:Data Samples (not showing every data type)Here are random samples from the last year (2024-2025), lightly redacted, but format and structure are untouched.
PROPERTY OWNERS / SERVICE PROVIDERS / EMPLOYEES
id,name,contact,email,type,joined,address,dni,iban
1023901,Juan García,Juan García,[email protected],owner,2024-03-10,C/ Gran Vía 12, 28013 Madrid,53914551K,ES9500130178145757710427
1023905,María López,María López,[email protected],owner,2024-04-15,Avda. Diagonal 45, 08003 Barcelona,02394739W,ES1202111581508905029896
1023912,Luis Fernández,Luis Fernández,[email protected],employee,2024-06-01,C/ Real 103, 41001 Sevilla,97389259Z,ES1231146588503150885286
1023920,Ana Martínez,Ana Martínez,[email protected],provider,2024-05-12,C/ Dr. Fleming 4, 46001 Valencia,44991836H,ES1320835725120972637072
1023924,Carlos Ruiz,Carlos Ruiz,[email protected],owner,2024-07-20,C/ San Vicente 14, 18001 Granada,71337495M,ES4902245537180503139265
1023937,Sofía Navarro,Sofía Navarro,[email protected],employee,2024-09-05,Autovía A-7, km. 448, 29006 Málaga,97116839Y,ES8520312648123357884431
1023942,Carmen Vidal,Carmen Vidal,[email protected],provider,2024-11-10,Polígono Carrús, C/ Nieve 5, 03001 Alicante,55417252V,ES1430243091175814952980
1023958,Antonio Carmona,Antonio Carmona,[email protected],employee,2024-08-15,Avda. de la Constitución 9, 41004 Sevilla,84352355Q,ES1721027038976670454356
1023978,José Juárez,José Juárez,[email protected],provider,2025-01-01,Pol. Ind. El Pastoret, C/ Alacant 38, 46001 Valencia,11307905R,ES2431027400156238168458
1023983,Clara Ramos,Clara Ramos,[email protected],owner,2024-12-28,C/ Ficticia 123, 28001 Madrid,55976104S,ES7301670185702051389291id,full_name,email,address,city,postal_code,phone(not_included_in_examples),dni,iban_refund
C307811,Clara Ramos,[email protected],Avda. del Puerto 50,Valencia,46023,NOTFREE,53914551K,ES9500130178145757710427
C307812,Pedro Muñoz,[email protected],C/ Mayor 12,Alicante,03001,NOTFREE,02394739W,ES1202111581508905029896
C307813,Lucía Fernández,[email protected],C/ Real 103,Madrid,28042,NOTFREE,97389259Z,ES1231146588503150885286
C307814,Marcos Vázquez,[email protected],C/ Violeta 22,Sevilla,41013,NOTFREE,23825134D,ES8914678842995293517978
C307815,Esther Martínez,[email protected],Avda. Libertad 17,Murcia,30009,NOTFREE,62090158W,ES6113011781685320343682
C307816,David León,[email protected],C/ Rosalía 7,Granada,18012,NOTFREE,99669594Z,ES3131634032677570388722
C307817,Isabel Torres,[email protected],C/ Goya 9,Madrid,28001,NOTFREE,27978030W,ES2214572677179725162806
C307818,Ricardo Gil,[email protected],C/ Zamora 8,Salamanca,37004,NOTFREE,57303188E,ES4030813548345007249169
C307819,Alberto Soria,[email protected],C/ Dársena 2,Cádiz,11006,NOTFREE,51039455V,ES9231578566195931841893
C307820,Marina Paredes,[email protected],Avda. Andalucía 143,Málaga,29006,NOTFREE,02884869W,ES6731130904143964897017booking_id,property_id,amount,date,concept,vat,method,location,total(not_included_in_examples)
F2024-32011,1023901,€650,2024-06-15,"Apartment booking, Madrid",21%,Card,Cozy Loft Madrid
F2024-32018,1023905,€1240,2024-07-16,"Apartment booking, Barcelona",10%,PayPal,Seafront Apt Barcelona
F2024-32021,1023912,€240,2024-08-17,"Studio booking, Sevilla",21%,Bank transfer,Sevilla Studio
F2024-32028,1023920,€1490,2024-09-18,"Penthouse booking, Valencia",10%,Card,Valencia Penthouse
F2024-32033,1023924,€390,2024-10-18,"Retreat booking, Granada",21%,PayPal,Granada Retreat
F2024-32037,1023937,€1045,2024-11-19,"Beach house booking, Málaga",21%,Bank transfer,Málaga Beach House
F2024-32041,1023942,€685,2024-12-20,"Riverside apt booking, Sevilla",21%,Card,Sevilla Riverside Apt
F2024-32044,1023958,€840,2025-01-20,"Modern flat booking, Barcelona",10%,PayPal,Barcelona Modern Flat
F2024-32051,1023978,€455,2025-02-21,"Suite booking, Madrid",21%,Bank transfer,Madrid Central Suite
F2024-32057,1023983,€580,2025-03-21,"Coastal apt booking, Alicante",21%,Card,Alicante Coastal Aptdate,sender,recipient,subject,password(not_included_in_examples)
2024-06-12,[email protected],[email protected],"Issue with booking sync",*
2024-07-29,[email protected],[email protected],"Pending invoice for cleaning services",*
2024-08-23,[email protected],[email protected],"Update to remote access policy",*
2024-09-24,[email protected],[email protected],"Confirmation of cleaning schedule",*
2024-10-24,[email protected],[email protected],"Request for external access review",*
2024-11-25,[email protected],[email protected],"Detected issue in booking platform",*
2024-12-25,[email protected],[email protected],"Urgent cleaning request for Valencia property",*
2025-01-26,[email protected],[email protected],"SFTP access for cleaning schedules",*
2025-02-27,[email protected],[email protected],"New employee added to management system",*
2025-03-27,[email protected],[email protected],"Unusual cloud access detected",*- I don’t mess around, no middlemen, the data is fresh, serious people only.
- Payments in BTC only.
Ban reason: selling in database section (Permanent)
