Unverified Claim Offers Moveciti Admin Access and Database With 1.18 Million Documents for Sale

Summary
A seller claims to offer administrator access to Moveciti and an exported database containing about 1.18 million documents. The access, data, counts and sale have not been independently verified.
Key points
- Actor “DaOnlySpark” claims to be selling Moveciti administrator access for $200, a database export for $150, or both for $300.
- The listing describes about 1.18 million documents across 24 Moveciti Bus App collections, including GPS, route-history and user records.
- A separate app is said to contain about 24,000 documents, including ride, marketing-event and device-login-history records.
- The claim also references about 26,826 files, including profile photos, vehicle-registration documents, driver-licence scans and identity-verification files.
- The publisher says screenshots document the offer and claimed database structure, but do not independently confirm access, authenticity, counts or current availability.
- If authentic, the data could expose rider and driver information, location and trip history, and identity documents, creating privacy, phishing and identity-fraud risks.
Article Details
- Victim Organization
- Moveciti
- Victim Domain
- moveciti[.]com
- Incident Type
- Alleged sale of administrator database access and an exported database
- Disclosure Date
- 2026-10-09
- Data Types Exposed
- User accounts
- Rider and driver information
- Bus GPS locations
- Route and trip history
- Device-login history
- Vehicle records and documents
- Driver licence scans
- Identity-verification documents
- Profile and vehicle images
- Transactions
- Marketing-event tracking metadata
- Affected Records
- The listing claims approximately 1.18 million documents across 24 Moveciti Bus App collections, approximately 24,000 documents across 30 Moveciti Viagens collections, and 26,826 files in a separate document collection. These counts were not independently verified.
- Affected Data Size
- The separate document collection is claimed to total approximately 354 MB.
- Operational Impact
- The actor claims to offer administrator-level database access and a database export. Access, export authenticity, and current availability have not been independently verified; no operational disruption is reported.
- Ransom Or Extortion
- The listing offers administrator access for $200, the exported database for $150, or both for $300. No ransom demand or extortion against Moveciti is reported.
- Claim Status
- claimed
MITRE ATT&CK
T1078 · Valid AccountsThe article maps the claimed sale of administrator-level database access to Valid Accounts as an inferred technique; it says the access method and any use of compromised credentials are not shown.T1213.006 · DatabasesThe article maps the claimed possession of an exported database to Data from Information Repositories: Databases as an inferred technique; acquisition and export authenticity are not independently established.
