Alleged breach of Weguest – 2.5M Records Exposed via API Misconfiguration

⚠ Disclaimer
This report includes actual screenshots and/or text that may include unredacted personally identifiable information (PII) gathered from publicly available sources. The sensitive information presented within this report is intended solely for cybersecurity awareness and threat intelligence purposes. Dark Web Informer explicitly condemns unauthorized access, distribution, or misuse of the personal data displayed or referenced here. Users must treat exposed data responsibly and ethically.

📌 Overview

Threat actor Gumball has claimed responsibility for the exfiltration of over 2.5 million records from Weguest, a Spanish rental property management firm. According to the post, the breach stemmed from a misconfigured third-party API used by Weguest and other rental management platforms. The actor shared structured CSV-like samples of owners, service providers, employees, bookings, refunds, and internal emails spanning from 2024–2025.

📊 Key Details