Ualabee Data Breach (2025)

On May 6, 2025, the South American mobility services platform Ualabee exposed records belonging to 472,000 users after data was scraped from an unprotected interface. The leaked information includes names, email addresses, phone numbers, dates of birth, and profile photos.

What Public Reporting Shows

Public reporting indicates the incident involved scraping rather than a traditional database breach. Have I Been Pwned lists the exposure with 472k unique email addresses as the primary identifier. The platform, which provides mobility and transportation services across South America, did not encrypt or adequately restrict access to the affected interface. Available reporting describes the data set as containing personal details that many users would consider routine profile information yet highly useful when combined.

No evidence of encryption was present, and the records appear to have been accessible for an undetermined period before discovery. The breach was added to major tracking databases in 2025, confirming the scale at nearly half a million affected accounts.

Why This Matters for You and Your Family

When your name, email, phone number, date of birth, and photo leave a company without your knowledge, the information rarely stays isolated. Criminals combine these details with data from other sources to build profiles that enable identity theft, targeted scams, or harassment. For families, a single exposed parent account can reveal children’s names or locations through shared addresses and linked profiles.

Phone numbers and dates of birth are especially valuable because they help bypass account recovery systems on banking, government, and social media services. Profile photos make impersonation easier and faster. If you or your family used the same email or password at Ualabee that appears elsewhere, the risk increases significantly.

The Doxxing and Identity-Chain Implications

Scraped personal records like these frequently become the starting point for doxxing chains. Attackers link an email to usernames on gaming platforms, social networks, or forums, then use the phone number and date of birth to reset passwords or impersonate victims. A single leak can cascade into account takeovers that expose even more sensitive data, including private messages, location history, or financial details.

Credential leaks like this one cascade into account takeovers and doxxing chains. Gaming accounts belonging to you or your children are particularly vulnerable because they often share the same email address or recovery phone number listed in the Ualabee records. Once one account falls, others follow in a chain that can reveal home addresses, family relationships, and daily routines.

What to Do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Rotate the password used at Ualabee anywhere it is reused and enable 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that chain back to the same contact details.
• Let remediation specialists perform hands-on takedown requests across data brokers and exposed profiles on your behalf.

The Ualabee incident illustrates how even routine mobility app data can fuel larger privacy violations if left unchecked. Acting quickly on known exposures while maintaining ongoing visibility is the most practical defense for ordinary families. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage including children’s gaming accounts.