Partender · Breach

Threat actor alleges leak of 200K customer records from Partender

Nov 02, 2026 · 1 min read

A threat actor posted on an underground forum a database they claim to have stolen from Partender, a US bar and restaurant inventory software company. The actor says it contains about 200,000 rows with full names, emails, phone numbers, PBKDF2-SHA256 password hashes and promotional tokens. Partender has not confirmed an incident; users should change reused passwords.

By HIFY Radar newsroom Updated 11/02/2026 05:40 PM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A threat actor posted on an underground forum a database they claim was stolen from Partender, a US bar and restaurant inventory software company. The actor says it holds about 200,000 customer records with full names, emails, phone numbers and password hashes. Partender has not confirmed an incident.

Why it matters

If confirmed, the leak exposes contact details and password hashes of customers who manage inventory for bars and restaurants. DailyDarkWeb assesses this is enough for credential stuffing and targeted phishing against those operators.

What to do

Change reused Partender passwords now. Tell staff to watch for phishing emails and messages that use this contact data.

For the technical team

Affected: Partender, empresa americana de software de gestão de estoque para bares e restaurantes; base alegada de clientes · Partender, a US bar and restaurant inventory software company; alleged database of about 200,000 customer records.
Exploitation: No exploitation reported. Threat-actor claim on an underground forum, surfaced by DailyDarkWeb; Partender has not confirmed an incident.
Fix: No fix applicable. Mitigation cited by the source: change reused passwords.
Vector: Alleged data leak on an underground forum; the source does not describe how the database was obtained.
More details: Data claimed by the actor: full names, email addresses, phone numbers, PBKDF2-SHA256 password hashes and promotional tokens. DailyDarkWeb assesses that hashes combined with contact details enable credential stuffing and targeted phishing against bar and restaurant operators. Unverified claim.