[Gumball]

Hi folks!
After many days I have exfiltrated sensitive data from Weguest.
The initial entry point was a from a platform that Weguest and other rental management companies uses (bad API configuration)

The dataset covers:Data Samples (not showing every data type)Here are random samples from the last year (2024-2025), lightly redacted, but format and structure are untouched.
PROPERTY OWNERS / SERVICE PROVIDERS / EMPLOYEES
 

id,name,contact,email,type,joined,address,dni,iban 1023901,Juan García,Juan García,[email protected],owner,2024-03-10,C/ Gran Vía 12, 28013 Madrid,53914551K,ES9500130178145757710427 1023905,María López,María López,[email protected],owner,2024-04-15,Avda. Diagonal 45, 08003 Barcelona,02394739W,ES1202111581508905029896 1023912,Luis Fernández,Luis Fernández,[email protected],employee,2024-06-01,C/ Real 103, 41001 Sevilla,97389259Z,ES1231146588503150885286 1023920,Ana Martínez,Ana Martínez,[email protected],provider,2024-05-12,C/ Dr. Fleming 4, 46001 Valencia,44991836H,ES1320835725120972637072 1023924,Carlos Ruiz,Carlos Ruiz,[email protected],owner,2024-07-20,C/ San Vicente 14, 18001 Granada,71337495M,ES4902245537180503139265 1023937,Sofía Navarro,Sofía Navarro,[email protected],employee,2024-09-05,Autovía A-7, km. 448, 29006 Málaga,97116839Y,ES8520312648123357884431 1023942,Carmen Vidal,Carmen Vidal,[email protected],provider,2024-11-10,Polígono Carrús, C/ Nieve 5, 03001 Alicante,55417252V,ES1430243091175814952980 1023958,Antonio Carmona,Antonio Carmona,[email protected],employee,2024-08-15,Avda. de la Constitución 9, 41004 Sevilla,84352355Q,ES1721027038976670454356 1023978,José Juárez,José Juárez,[email protected],provider,2025-01-01,Pol. Ind. El Pastoret, C/ Alacant 38, 46001 Valencia,11307905R,ES2431027400156238168458 1023983,Clara Ramos,Clara Ramos,[email protected],owner,2024-12-28,C/ Ficticia 123, 28001 Madrid,55976104S,ES7301670185702051389291

GUESTS (2024-2025)
 

id,full_name,email,address,city,postal_code,phone(not_included_in_examples),dni,iban_refund C307811,Clara Ramos,[email protected],Avda. del Puerto 50,Valencia,46023,NOTFREE,53914551K,ES9500130178145757710427 C307812,Pedro Muñoz,[email protected],C/ Mayor 12,Alicante,03001,NOTFREE,02394739W,ES1202111581508905029896 C307813,Lucía Fernández,[email protected],C/ Real 103,Madrid,28042,NOTFREE,97389259Z,ES1231146588503150885286 C307814,Marcos Vázquez,[email protected],C/ Violeta 22,Sevilla,41013,NOTFREE,23825134D,ES8914678842995293517978 C307815,Esther Martínez,[email protected],Avda. Libertad 17,Murcia,30009,NOTFREE,62090158W,ES6113011781685320343682 C307816,David León,[email protected],C/ Rosalía 7,Granada,18012,NOTFREE,99669594Z,ES3131634032677570388722 C307817,Isabel Torres,[email protected],C/ Goya 9,Madrid,28001,NOTFREE,27978030W,ES2214572677179725162806 C307818,Ricardo Gil,[email protected],C/ Zamora 8,Salamanca,37004,NOTFREE,57303188E,ES4030813548345007249169 C307819,Alberto Soria,[email protected],C/ Dársena 2,Cádiz,11006,NOTFREE,51039455V,ES9231578566195931841893 C307820,Marina Paredes,[email protected],Avda. Andalucía 143,Málaga,29006,NOTFREE,02884869W,ES6731130904143964897017

BOOKINGS / RESERVATIONS (2024-2025)
 

booking_id,property_id,amount,date,concept,vat,method,location,total(not_included_in_examples) F2024-32011,1023901,€650,2024-06-15,"Apartment booking, Madrid",21%,Card,Cozy Loft Madrid F2024-32018,1023905,€1240,2024-07-16,"Apartment booking, Barcelona",10%,PayPal,Seafront Apt Barcelona F2024-32021,1023912,€240,2024-08-17,"Studio booking, Sevilla",21%,Bank transfer,Sevilla Studio F2024-32028,1023920,€1490,2024-09-18,"Penthouse booking, Valencia",10%,Card,Valencia Penthouse F2024-32033,1023924,€390,2024-10-18,"Retreat booking, Granada",21%,PayPal,Granada Retreat F2024-32037,1023937,€1045,2024-11-19,"Beach house booking, Málaga",21%,Bank transfer,Málaga Beach House F2024-32041,1023942,€685,2024-12-20,"Riverside apt booking, Sevilla",21%,Card,Sevilla Riverside Apt F2024-32044,1023958,€840,2025-01-20,"Modern flat booking, Barcelona",10%,PayPal,Barcelona Modern Flat F2024-32051,1023978,€455,2025-02-21,"Suite booking, Madrid",21%,Bank transfer,Madrid Central Suite F2024-32057,1023983,€580,2025-03-21,"Coastal apt booking, Alicante",21%,Card,Alicante Coastal Apt

INTERNAL EMAILS & LOGS (2024-2025)

date,sender,recipient,subject,password(not_included_in_examples) 2024-06-12,[email protected],[email protected],"Issue with booking sync",* 2024-07-29,[email protected],[email protected],"Pending invoice for cleaning services",* 2024-08-23,[email protected],[email protected],"Update to remote access policy",* 2024-09-24,[email protected],[email protected],"Confirmation of cleaning schedule",* 2024-10-24,[email protected],[email protected],"Request for external access review",* 2024-11-25,[email protected],[email protected],"Detected issue in booking platform",* 2024-12-25,[email protected],[email protected],"Urgent cleaning request for Valencia property",* 2025-01-26,[email protected],[email protected],"SFTP access for cleaning schedules",* 2025-02-27,[email protected],[email protected],"New employee added to management system",* 2025-03-27,[email protected],[email protected],"Unusual cloud access detected",*

• I don’t mess around, no middlemen, the data is fresh, serious people only.
  
• Payments in BTC only.
  

---

[johndick]

Data seems to be fake, this user is a multi account of @WhiteCoat

Data of this post - Generated: 1023905,María López,María López,[email protected],owner,2024-04-15,Avda. Diagonal 45, 08003 Barcelona,02394739W,ES1202111581508905029896

C307812,Pedro Muñoz,[email protected],C/ Mayor 12,Alicante,03001,NOTFREE,02394739W,ES1202111581508905029896 Data of the Hacendado post - Generated too:

C307812,Pedro Muñoz,[email protected],C/ Mayor 12,Alicante,03001,NOTFREE,02394739W,ES1202111581508905029896

[Idolag]

thanks

[ahmedyiwu8]

thanks