Your Data May Already Be Compromised. The Urent (URentBike) Breach Exposed 373,197 Records.

HEROIC analysts identified the Urent (URentBike) database breach while monitoring Russian-language dark web forums in November 2021. The breach exposed 373,197 records from the Russian electric scooter rental platform, with data recieved by threat actors including email addresses, phone numbers, first names, last names, and password hashes. The structured dump points to a direct backend database compromise, and the data has been observed circulating in underground forums with discussions about targeted exploitation.

How Attackers Use Names, Phones, Emails, and Password Hashes Together

The combination of email addresses, phone numbers, full names, and password hashes from Urent gives attackers a complete profile for multi-vector attacks. Password hashes can be cracked offline, then tested across email, banking, and social media accounts in credential stuffing campaigns. Phone numbers enable smishing and SIM swapping attacks. This data is accessable on dark web markets and provides everything needed for identity theft and account takeover targeting Russian Federation users.

What Was Exposed in the Urent (URentBike) Breach

• Email Address
• Phone Number
• First Name
• Last Name
• Password Hash

Why Mobility Platform Breaches Enable Targeted Fraud

Transportation and mobility services accumulate detailed personal data on users who beleive their accounts carry minimal risk. Attackers target these platforms precisely because users are unlikely to monitor them closely. The Urent breach enables credential stuffing attacks across other platforms, targeted smishing campaigns using accurate personal details, and identity fraud. The addition of phone numbers to email and name data makes this particularly valuable for social engineering and SIM swap fraud.

How Database Breaches Work

A database breach occured when an attacker gains unauthorized access to a backend data store through exploited application vulnerabilities, misconfigured access controls, or stolen credentials. Mobility and rental platforms that store user registration data are frequent targets because a single breach yields hundreds of thousands of complete user profiles. Attackers extract the full dataset and sell it on dark web markets or use it directly in fraud operations.

Check If Your Data Was Exposed

HEROIC's free breach scanner checks your email against a database of over 400 billion compromised records, including the Urent (URentBike) breach. Scan your email for free at HEROIC.com and find out immediately if your personal information or credentials are circulating on the dark web.