TheSqua.re Data Breach (2025)

On June 27, 2025, a dataset containing 107,000 unique customer records from TheSqua.re was posted to a popular hacking forum. The exposed information includes email addresses, names, phone numbers, and geographic locations belonging to customers of the serviced-apartment booking platform.

What's Publicly Reported from Reporting

Public reporting indicates the breach occurred sometime before June 2025. TheSqua.re, which describes itself as the easiest way to find your next serviced apartment, has not issued any public statement or confirmation despite repeated outreach. Industry research from sources such as DoxxScan™ continuous monitoring verified the legitimacy of the sample records after multiple affected subscribers confirmed that their exact names, emails, phone numbers, and cities matched the leaked data. No passwords or financial details appear to have been included in the posted dataset.

Why This Matters for You and Your Family

When your name, email, phone number, and city are bundled together, the information becomes far more useful to identity thieves, telemarketers, and stalkers than any single piece on its own. 107,000 families now face an elevated risk of phishing emails, smishing texts, and unwanted calls that feel personal because the attacker already knows where you live. For households that booked family getaways or corporate housing through the platform, the exposure can also reveal travel patterns that bad actors might exploit for burglary planning or harassment.

The Doxxing and Identity-Chain Implications

Names paired with phone numbers and locations accelerate doxxing chains. Once an attacker links your TheSqua.re email to accounts on social media, gaming platforms, or shopping sites, they can map your entire digital footprint. Credential leaks of this nature often cascade into account takeovers, especially for gaming accounts belonging to you or your children. A single exposed email and phone combination can unlock password-reset flows across dozens of other services, turning one low-severity breach into a gateway for sustained harassment or identity theft.

What to Do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Rotate the password you used at TheSqua.re anywhere it is reused and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours instead of months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that chain back to the same address or contact details.
• Let remediation specialists handle takedown requests across data brokers and exposed profiles on your behalf.

The incident shows that even companies offering everyday services can leave your personal details exposed without warning or remedy. A forward-looking approach means treating every breach as a link in a larger chain rather than an isolated event. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Starting your DoxxScan trial today gives you and your family the early warning and expert support needed to break those chains before they grow.