05-06-25, 04:27 PM
![[Image: k2_items_src_34a43e4b26abe2aa9a1cced6f8251818.jpg]](https://prnoticias.com/wp-content/uploads/2017/07/k2_items_src_34a43e4b26abe2aa9a1cced6f8251818.jpg)
After many days I have exfiltrated sensitive data from Weguest.
The initial entry point was a from a platform that Weguest and other rental management companies uses (bad API configuration)
The dataset covers:Data Samples (not showing every data type)Here are random samples from the last year (2024-2025), lightly redacted, but format and structure are untouched.
PROPERTY OWNERS / SERVICE PROVIDERS / EMPLOYEES
Code:
id,name,contact,email,type,joined,address,dni,iban
1023901,Juan García,Juan García,juangarcia@gmail.com,owner,2024-03-10,C/ Gran Vía 12, 28013 Madrid,53914551K,ES9500130178145757710427
1023905,María López,María López,maria.lopez@outlook.com,owner,2024-04-15,Avda. Diagonal 45, 08003 Barcelona,02394739W,ES1202111581508905029896
1023912,Luis Fernández,Luis Fernández,luis.fdz@guestready.com,employee,2024-06-01,C/ Real 103, 41001 Sevilla,97389259Z,ES1231146588503150885286
1023920,Ana Martínez,Ana Martínez,ana.martinez@cleaningteam.es,provider,2024-05-12,C/ Dr. Fleming 4, 46001 Valencia,44991836H,ES1320835725120972637072
1023924,Carlos Ruiz,Carlos Ruiz,carlos.ruiz@gmail.com,owner,2024-07-20,C/ San Vicente 14, 18001 Granada,71337495M,ES4902245537180503139265
1023937,Sofía Navarro,Sofía Navarro,sofia.navarro@guestready.com,employee,2024-09-05,Autovía A-7, km. 448, 29006 Málaga,97116839Y,ES8520312648123357884431
1023942,Carmen Vidal,Carmen Vidal,carmen.vidal@cleaningteam.es,provider,2024-11-10,Polígono Carrús, C/ Nieve 5, 03001 Alicante,55417252V,ES1430243091175814952980
1023958,Antonio Carmona,Antonio Carmona,antonio.carmona@guestready.com,employee,2024-08-15,Avda. de la Constitución 9, 41004 Sevilla,84352355Q,ES1721027038976670454356
1023978,José Juárez,José Juárez,jose.juarez@cleaningteam.es,provider,2025-01-01,Pol. Ind. El Pastoret, C/ Alacant 38, 46001 Valencia,11307905R,ES2431027400156238168458
1023983,Clara Ramos,Clara Ramos,clara.ramos@outlook.com,owner,2024-12-28,C/ Ficticia 123, 28001 Madrid,55976104S,ES7301670185702051389291
Code:
id,full_name,email,address,city,postal_code,phone(not_included_in_examples),dni,iban_refund
C307811,Clara Ramos,clara.ramos88@gmail.com,Avda. del Puerto 50,Valencia,46023,NOTFREE,53914551K,ES9500130178145757710427
C307812,Pedro Muñoz,pmunoz1990@hotmail.com,C/ Mayor 12,Alicante,03001,NOTFREE,02394739W,ES1202111581508905029896
C307813,Lucía Fernández,lucia.fdz@outlook.com,C/ Real 103,Madrid,28042,NOTFREE,97389259Z,ES1231146588503150885286
C307814,Marcos Vázquez,marcos.vazquez@telefonica.es,C/ Violeta 22,Sevilla,41013,NOTFREE,23825134D,ES8914678842995293517978
C307815,Esther Martínez,esther.martinez@gmail.com,Avda. Libertad 17,Murcia,30009,NOTFREE,62090158W,ES6113011781685320343682
C307816,David León,david.leon@yahoo.es,C/ Rosalía 7,Granada,18012,NOTFREE,99669594Z,ES3131634032677570388722
C307817,Isabel Torres,isabel.torres@guestready.com,C/ Goya 9,Madrid,28001,NOTFREE,27978030W,ES2214572677179725162806
C307818,Ricardo Gil,ricardo.gil@protonmail.com,C/ Zamora 8,Salamanca,37004,NOTFREE,57303188E,ES4030813548345007249169
C307819,Alberto Soria,alberto.soria@gmail.com,C/ Dársena 2,Cádiz,11006,NOTFREE,51039455V,ES9231578566195931841893
C307820,Marina Paredes,marina.paredes@icloud.com,Avda. Andalucía 143,Málaga,29006,NOTFREE,02884869W,ES6731130904143964897017
Code:
booking_id,property_id,amount,date,concept,vat,method,location,total(not_included_in_examples)
F2024-32011,1023901,€650,2024-06-15,"Apartment booking, Madrid",21%,Card,Cozy Loft Madrid
F2024-32018,1023905,€1240,2024-07-16,"Apartment booking, Barcelona",10%,PayPal,Seafront Apt Barcelona
F2024-32021,1023912,€240,2024-08-17,"Studio booking, Sevilla",21%,Bank transfer,Sevilla Studio
F2024-32028,1023920,€1490,2024-09-18,"Penthouse booking, Valencia",10%,Card,Valencia Penthouse
F2024-32033,1023924,€390,2024-10-18,"Retreat booking, Granada",21%,PayPal,Granada Retreat
F2024-32037,1023937,€1045,2024-11-19,"Beach house booking, Málaga",21%,Bank transfer,Málaga Beach House
F2024-32041,1023942,€685,2024-12-20,"Riverside apt booking, Sevilla",21%,Card,Sevilla Riverside Apt
F2024-32044,1023958,€840,2025-01-20,"Modern flat booking, Barcelona",10%,PayPal,Barcelona Modern Flat
F2024-32051,1023978,€455,2025-02-21,"Suite booking, Madrid",21%,Bank transfer,Madrid Central Suite
F2024-32057,1023983,€580,2025-03-21,"Coastal apt booking, Alicante",21%,Card,Alicante Coastal Apt
Code:
date,sender,recipient,subject,password(not_included_in_examples)
2024-06-12,operations@guestready.com,support@guestready.com,"Issue with booking sync",*
2024-07-29,owners@guestready.com,finance@guestready.com,"Pending invoice for cleaning services",*
2024-08-23,hr@guestready.com,employees@guestready.com,"Update to remote access policy",*
2024-09-24,operations@guestready.com,info@cleaningteam.es,"Confirmation of cleaning schedule",*
2024-10-24,security@guestready.com,infra@guestready.com,"Request for external access review",*
2024-11-25,admin@guestready.com,techsupport@guestready.com,"Detected issue in booking platform",*
2024-12-25,bookings@guestready.com,info@cleaningteam.es,"Urgent cleaning request for Valencia property",*
2025-01-26,operations@guestready.com,info@cleaningteam.es,"SFTP access for cleaning schedules",*
2025-02-27,admin@guestready.com,hr@guestready.com,"New employee added to management system",*
2025-03-27,security@guestready.com,infra@guestready.com,"Unusual cloud access detected",*
- I don’t mess around, no middlemen, the data is fresh, serious people only.
- Payments in BTC only.
Ban reason: selling in database section (Permanent)