The data was stolen from the CityBee car-sharing platform, specifically from a backup database that had been left publicly accessible on a server [1, 5].
Immediately update passwords for any accounts that reused the credentials found in the leak [1]. duombaze.rar
The leaked archive contained user names, surnames, personal identification numbers (ID codes), email addresses, phone numbers, and hashed passwords [1, 3]. It did not include payment card details [3, 4]. The data was stolen from the CityBee car-sharing
The leak prompted a massive investigation by the Lithuanian police and the State Data Protection Inspectorate (VDAI) [2]. CityBee eventually faced significant fines for failing to ensure adequate security measures [4]. Security Recommendations for Users If you believe your data was part of this or similar leaks: It did not include payment card details [3, 4]
Activate two-factor authentication on all sensitive accounts (email, banking, social media) to add a layer of protection beyond just a password [5].
Be wary of unsolicited emails or texts, as attackers often use leaked contact info to launch targeted phishing campaigns [1].
Use services like Have I Been Pwned to see if your email address has appeared in "duombaze.rar" or other public breaches.
