Etihad Towers · Breach

Threat actor claims sale of Etihad Towers access and database dump

Nov 02, 2026 · 1 min read

A threat actor on an underground forum claims to sell full system access and a database dump from Etihad Towers, the Abu Dhabi complex of residences, offices and a hotel. The claim covers records from 2016 to 2025, including contacts, reservations, room availability, internal messages and password-reset tables. Etihad Towers has not confirmed an incident; monitor for confirmation and treat reservation-related messages with caution.

By HIFY Radar newsroom Updated 11/02/2026 07:13 PM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A threat actor on an underground forum claims to sell full system access and a database dump from Etihad Towers, the Abu Dhabi complex of residences, offices and a hotel. The offer covers records from 2016 to 2025: contacts, reservations, room availability, internal messages and password-reset tables. Etihad Towers has not confirmed an incident and the claim is unverified.

Why it matters

If confirmed, the data exposes guest contacts and reservations at a high-profile property, a base for targeted phishing and fraud against customers. The claimed live access raises the risk of further intrusion. There is no confirmation from the victim yet, but the open sale already carries reputational risk.

What to do

Monitor intelligence and press channels for confirmation or publication of the material. Brief teams on guest-targeted phishing and treat reservation-related messages from the complex with caution until there is clarity.

For the technical team

Affected: Etihad Towers, complexo de residências, escritórios e hotel em Abu Dhabi (EAU) · Etihad Towers, the Abu Dhabi complex of residences, offices and a hotel (UAE); the source notes the claimed victim is Etihad Towers, not Etihad Airways.
Exploitation: Unverified claim. An underground forum actor claims live full system access and is selling a database dump; sale reported by DailyDarkWeb. No victim confirmation, no PoC or verified exploitation.
Fix: Not applicable: data breach claim, no product or version involved.
More details: Material claimed by the actor: records from 2016 to 2025, including contacts, reservation and room-availability data, internal messages and password-reset tables. DailyDarkWeb assesses that reservation and contact data for a high-profile property is useful for guest-targeted phishing and fraud, and that the claimed live access raises the risk of further intrusion. Single source: DailyDarkWeb post on X. No incident confirmation from Etihad Towers.