A threat actor claims to have breached Now Book It, a restaurant reservation and management platform operating extensively across Australia and New Zealand. The actor is attempting to sell a database containing what is alleged to be 10.7 million records, including data from approximately 4.8 million Australian and 425,000 New Zealand users.
According to the actor, the compromised data includes a wide range of personally identifiable information (PII). The exfiltrated database allegedly contains the following fields:
- Full Names
- Phone Numbers
- Email Addresses
- Dates of Birth (Day, Month, and Year)
- Company Name
- Physical Address details (Street, Suburb, Postcode)
- Account IDs
- Internal Notes












