Speero Data Dump Allegedly Exposes Password and Reset-Token Fields
Summary
A report alleges Saudi car-parts marketplace speero[.]net was dumped and its data offered for sale. The claimed 11GB dataset spans 83 CSV tables; a free user-table sample reportedly includes password and reset-token fields.
Key points
- A report alleges that Saudi car-parts marketplace speero[.]net was dumped in full.
- The alleged dataset is 11GB across 83 CSV tables and was reportedly offered for sale at a price available on request.
- A user table was reportedly shared for free as a sample.
- The report says the data included password and reset-token fields and identifies UNC2030 as the actor.
- The supplied article does not independently confirm the dump or the actor attribution.
Article Details
- Victim Organization
- Speero
- Victim Domain
- speero.net
- Incident Type
- Alleged full database dump and sale
- Data Types Exposed
- User data
- Passwords
- Password reset tokens
- Affected Records
- Not disclosed
- Affected Data Size
- 11GB across 83 CSV tables
- Operational Impact
- None reported
- Ransom Or Extortion
- The alleged data was offered for sale at a price available on request; no ransom demand or extortion activity was reported.
- Claim Status
- alleged