A threat actor on a dark web forum claims to be selling sensitive data belonging to Xoxoday, a leading global platform for rewards, incentives, and payout infrastructure. The company collaborates with major industry players such as Apple, Microsoft, Amazon, and Slack.
In their message, the seller details that the dataset includes extensive information. The data purportedly consists of 824,843 unique entries containing fields such as Unique ID, Payment Reference ID, Recipient Name, Email, Phone Number, Campaign Details, and Redemption History, among others.
The threat actor notes that they are offering the information as a one-time sale and will only accept payments in Monero (XMR).
