Actor claims sale of 777,000 United Rentals user records
A threat actor on a dark web forum is selling what they claim are about 777,000 user records of United Rentals, the largest equipment rental company in North America, for $1,000. The posted sample includes personal and corporate email addresses, but the only proof offered is a sample of emails. The claim is unverified; customers should watch for phishing.
What happened
A threat actor on a dark web forum is selling what they claim are about 777,000 United Rentals user records for $1,000; United Rentals is the largest equipment rental company in North America. The posted sample includes personal and corporate email addresses. The claim is unconfirmed.
Why it matters
If genuine, the corporate addresses give attackers a ready target list for phishing and business email compromise posing as rental invoices or account notices. There is no confirmation of a breach, but customers are exposed to fraudulent billing and account notices.
What to do
Tell customers and staff to treat unexpected billing emails with suspicion and reset passwords. Watch United Rentals official channels for confirmation or further guidance.
For the technical team
- Affected
- United Rentals, maior empresa de aluguel de equipamentos da América do Norte; base alegada com cerca de 777 mil registro · United Rentals; about 777,000 user records claimed. Actual depth of the data unclear.
- Exploitation
- No confirmed exploitation; claim reported by DailyDarkWeb. The only proof offered is the sample of email addresses.
- Fix
- No fix applicable. Analyst-cited mitigation: beware of unexpected billing emails and reset passwords.
- Vector
- Alleged user database leak; compromise vector unknown. The posted sample contains personal and corporate email addresses; the actor claims the database includes user account records.
- More details
- Asking price by the actor: $1,000. Announced on a dark web forum. DailyDarkWeb classifies the case as an unverified threat-actor claim, not confirmation of a breach. Cited risk: phishing and business email compromise posing as rental invoices or account notices.
Timeline
Incident opened.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
