2026 Moveciti — forum admin-access + DB sale claim; ~1.18M bus-app documents (unverified)
Data compromised
Actor-claimed: admin DB access + Oct 9 2026 export; Moveciti Bus App ~1.18M documents across GPS/route/user/ride collections; Viagens app ~24K docs; user accounts, favorites, device logins, identity-verification docs, images (unverified)
Technical writeup
Unverified leak-site / forum sale claim. Dark Web Informer (Oct 9, 2026) reported actor “DaOnlySpark” offering Moveciti (Brazil digital bus mobility) administrator database access ($200), a claimed Oct 9 2026 export ($150), or both ($300). Listing advertises ~1.18M Bus App documents (e.g. 686,665 live GPS rows, 260,784 route history, 42,442 app users) plus Viagens collections (~24K). DWI states access, export, counts, and availability are unverified. companyConfirmed false; recordsAffected 1180000 (actor document count, unverified).
Root cause
Unverified dark-web access/sale listing (actor DaOnlySpark); company confirmation not published at indexing