Data Breach News2 min read
100,540 Rows Exposed in TheSqua.re Data Breach
By InsecureWeb Team
This report reflects observations of dark web activity. InsecureWeb makes no representations regarding the accuracy of this data.
Data Breach Summary
On June 30, 2025, threat actor “888” (on DarkForums.st) disclosed a breach of TheSqua.re, a global serviced‑apartment provider. The leak includes 100,540 rows of user data—representing 86,360 unique individuals. Compromised fields include:
- Full name
- Account creation date
- Status (Enabled)
- Mobile number & Work phone
- Subscription flag
- City
- Rewards balance
- User type (corporate/leisure)
Where and How?
The dataset was shared on DarkForums.st by user “888.” While the initial post offers no technical details, such breaches often result from unsecured databases or application-layer vulnerabilities. The inclusion of both mobile and work phone numbers raises serious privacy and targeted scam concerns.
Company Data Breach History
No prior public reports indicate that TheSqua.re experienced data compromise before this incident. This appears to be their first known breach, involving high‑value user contact information and account metadata—an alarming exposure for a company handling travel accommodation data.
Recommendations for Personal Data Protection
How Affected Users Should Respond:
- Change the password used on TheSqua.re.
- Review linked services (especially rewards or booking systems).
- Be cautious of unsolicited calls or phishing attempts referencing your stay or loyalty status.
- Enable multi-factor authentication if available.
- Monitor accounts and credit reports for any unusual activity.
How TheSqua.re Should Respond:
- Secure any exposed databases and audit access logs.
- Notify all affected customers transparently.
- Require password resets and enforce MFA.
- Conduct a full security audit of systems and APIs.
- Regularly monitor dark web forums for data re‑sharing and leaks.
What is InsecureWeb?
InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.
Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.
