16K Crewfare Emails Leaked on DarkForum.st

Data Breach Summary

On May 22, 2025, a significant data breach involving Crewfare Inc., a U.S.-based travel-tech company, was identified on the cybercrime forum DarkForum.st. The breach, disclosed by the user ‘OneERA,’ includes a dataset containing approximately 16,000 internal emails. These emails encompass detailed information such as sender and recipient addresses, timestamps, subject lines, message bodies, delivery statuses, error logs, and metadata. The exposed data appears to originate from Crewfare’s internal communication systems, potentially including both operational and customer-related correspondence.

---

Where and How?

The leaked dataset was discovered on DarkForum.st, a known platform for cybercriminal activities. The user ‘OneERA’ posted the data, which comprises structured email records with fields like email_to, email_from, subject, message, and attachments. The presence of such detailed information suggests a breach of Crewfare’s email infrastructure, possibly through unauthorized access or exploitation of vulnerabilities in their communication systems.

Company Background

Founded in 2021 by Jason van Esso, Jordan Scheffler, and Zach Picon, Crewfare is a pioneering travel-tech company that transforms how people discover, book, and enjoy event-based travel. The company streamlines event travel into personalized experiences, partnering with over 6,500 hotels and supporting more than 200 events. Crewfare has facilitated travel for over 500,000 travelers, aiming to be a vital partner in the global events industry through innovative travel solutions.

---

Company Data Breach History

As of now, there are no publicly reported incidents of prior data breaches involving Crewfare. This recent exposure underscores the importance of robust cybersecurity measures, especially for companies handling sensitive customer data and internal communications.

Recommendations for Personal Data Protection

How Users Can Protect Their Information
To safeguard personal information and accounts, users should consider the following steps:

• Change Passwords Regularly: Use strong, unique passwords combining letters, numbers, and symbols.
• Enable Two-Factor Authentication (2FA): Whenever possible, activate 2FA to add an extra layer of security to accounts.
• Use Unique Passwords for Each Account: Avoid reusing passwords across different platforms to prevent multiple account compromises.
• Be Cautious of Phishing Attempts: Stay vigilant against suspicious emails or messages that may contain malicious links or solicit personal information.
• Monitor Accounts for Unusual Activity: Regularly review account statements and activities to detect and respond promptly to unauthorized actions.

By adopting these practices, users can enhance their personal data security and reduce the risk of unauthorized access to their information.

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.