In a significant cybersecurity incident, Dubai Municipality, the government body responsible for city services in Dubai, UAE, has allegedly suffered a major data breach. A threat actor posted the claim on a dark web forum, revealing that over 60 GB of sensitive data, including personal and financial records, was compromised.
The threat actor claims that the breach involves a vast range of data, including records from various inspections, customer databases, and payment transactions. The data allegedly includes:
Inspections Data: Over 1 million records, including business inspection details, violations, and hotel inspections. Specific datasets contain information on businesses’ licensing, contact information, and scheduled inspections.
Customer Data: A dataset of more than 1 million customers, with personal identifiers such as names, phone numbers, and emails.
Payment Information: Over 160,000 records detailing payment transactions, voucher numbers, amounts, and company details.
Land Ownership Records: Multiple datasets related to land records, including ownership details, passport numbers, and geographic coordinates.
Employee Data: Almost 30,000 records of employee details, including personal identifiers, job titles, and termination reasons.
Corporate Contacts: 273,000 records including contact information for various companies and individuals.
Additionally, the hacker claims to possess around 60-80 GB of scanned documents, including passports, ID cards, and other personal identification files.
The alleged data is being offered for sale, with the actor accepting cryptocurrency payments through forum escrow services. The listing includes an option to purchase all leaked files, with the seller promising immediate delivery through secure channels.
