Anonymous Seller Claims Clickrent.es Dataset of 2.5 Million Records

· Original article ↗

Summary

An anonymous seller is offering a dataset allegedly taken from Clickrent[.]es, claiming about 2.5 million records and over 100GB of KYC files, customer data and internal documents. The breach and contents remain unverified.

Key points

  • An anonymous actor is reportedly offering a dataset allegedly taken from Clickrent.es for sale on a hacker forum.
  • The seller claims the dataset contains about 2.5 million records and more than 100GB of KYC files, customer data and internal documents.
  • Reported data includes names, dates of birth, contact details, passwords, national ID and passport numbers, driver’s license details, and partial card numbers.
  • The dataset is also said to include rental booking information, identity-verification files, employee details and internal financial data.
  • The seller claims to have tried negotiating with Clickrent.es for over two weeks before offering the data publicly; the breach and dataset contents are unverified.

Article Details

Victim Organization
Clickrent.es
Victim Domain
Clickrent.es
Incident Type
Alleged data breach and sale of an allegedly compromised dataset
Data Types Exposed
  • Full names
  • Dates of birth
  • Email addresses
  • Phone numbers
  • Physical addresses
  • Passwords
  • National ID numbers
  • Passport numbers and expiration dates
  • Driver’s license details
  • Partial credit card numbers
  • Car rental booking information
  • KYC verification files, including passports, IDs, selfies, and PDFs
  • Employee details
  • Internal financial data
  • Internal agency documents
Affected Records
Approximately 2.5 million records, according to the report; alleged.
Affected Data Size
More than 100GB, according to the report; alleged.
Operational Impact
No operational impact is reported.
Ransom Or Extortion
The anonymous seller claims to have attempted negotiations with Clickrent.es for over two weeks before offering the dataset for sale and going public. No specific ransom demand is reported.
Claim Status
alleged

Industries