Alleged Data Breach of PeekUp: Threat Actor Claims Sale of 113,000 User Records and Driver Information
An alleged data breach involving PeekUp, a Philippine-based ride-hailing and mobility platform, has surfaced on a cybercrime forum after a threat actor claimed to be selling a database allegedly containing approximately 113,000 records associated with the platform.
https://iili.io/nUdrsdQ.png
The listing, published by a threat actor identified as Exiles in the forum's Auctions section, claims that the compromised information includes approximately 7,200 email addresses and records associated with an estimated 26,000 to 30,000 drivers.
According to the threat actor's post, the alleged dataset contains user and driver information, with a sample record displayed to demonstrate the purported contents of the database. The exposed sample appears to include personally identifiable information (PII), such as names, telephone numbers, email addresses, gender, and account-related details.
More concerning, the threat actor also claims to offer access to PeekUp's administrative panel, allegedly as part of a separate transaction. The listing advertises different purchasing arrangements, including a database acquisition and temporary access to the purported administrative interface.
The threat actor has not provided independently verifiable evidence establishing the full extent of the alleged compromise. Consequently, the authenticity of the dataset, the claimed number of affected records, and the alleged administrative access remain unverified.
If the claims are substantiated, the incident could expose affected users and drivers to potential privacy violations, targeted phishing, identity-related fraud, and other forms of social engineering.
As of this report, there has been no independently confirmed information establishing whether PeekUp has acknowledged the alleged incident or initiated an investigation.
