Textitute, a bulk SMS, push notification, and marketing automation platform, has allegedly been compromised resulting in a significant data leak. The breach was disclosed on a hacking forum by an actor who claims to have exfiltrated the company’s full SQL database dump. The incident reportedly impacts not only the platform’s core data but also co-hosted databases containing information related to fertility leads, social apps, and resort guest management systems.
According to the actor, the breach occurred on January 13, 2026, and involves a database size of approximately 25.7 MB containing over 2.8 million rows. The allegedly compromised data includes:
-
Full names
-
Email addresses
-
Phone numbers
-
User authentication details and password resets
-
Push tokens and affiliate setup information
-
Transaction logs
-
Sensitive message content (including medical inquiries regarding IVF and surrogacy)
-
IP addresses and timestamps
