A threat actor claims to be selling live, authenticated admin panel access to a major US Non-Emergency Medical Transportation (NEMT) platform, advertising real-time control over operations rather than a static dump. The listing includes 500,000+ patient records, the ability to create fake provider accounts and spawn ride assignments, and access to a 200+ subcontractor network reportedly integrated with Lyft and Uber Health, with the source code of the underlying “Smart-Data-Hub” codebase included.

• Live admin dashboard with operational control
• Provider creation (registering fake companies to receive real ride assignments)
• Patient demographic data and full PII
• SSNs
• Insurance details (Medi-Cal and others)
• Sensitive medical records
• 200+ subcontractor network access (Lyft, Uber Health integrations)
• Active trips, driver assignments, billing details
• Trip “completion” and invoice generation without service
• Source code of Smart-Data-Hub backend
• Competitive intelligence on routes and pricing across 200+ competitors