← All datasets

thesqua.re

Jun 1, 2025

141,860

Records

19

Files

May 31, 2026

Added

In June 2025, data from TheSqua.re, a serviced apartment booking platform, was allegedly obtained by threat actor @888 and posted on BreachForums. The breach exposed approximately 128,058 user records containing 107,111 unique email addresses, full names, phone numbers, cities, account creation dates, user types (leisure/corporate), and rewards points. The breach was subsequently added to HaveIBeenPwned and confirmed legitimate by multiple impacted subscribers.

Data found in this dataset

EmailCityCountryfullNamephone

Source files

Expand any file to inspect its column headers and the LLM's field-mapping reasoning, recorded during ingestion.

TheSquaRE__Info.txt

5 columns27 rows

File structure

Format: CSV·Delimiter: comma·Has header: yes·Quote: "

Source column	Mapped field	Confidence	LLM assessment
0	email	high	[0] header 'Email', all values contain @ symbol and are valid email addresses
1	fullName	high	[1] header 'Full name', values are complete person names (e.g., 'Mona alenezi Alenezi', 'Winfried Trapp')
4	phone	high	[4] header 'Mobile number', values are phone numbers with international formats (e.g., '+96590970233', '+49 (0)174 209 5408')
5	phone	high	[5] header 'Work phone', values are phone numbers (e.g., '01225 336004', '+919820935150') or empty
7	city	high	[7] header 'City', values are geographic locations (e.g., 'Kuwait cuty', 'Essen', 'Bath', 'Mumbai')

Notes: TheSqua.re breach: 128,058 user records with 107,111 unique emails. Columns 2 (Creation date), 3 (Enabled), 6 (Subscribed), 8 (Rewards), 9 (User type) are skipped as non-PII (timestamps, flags, and internal classification data). Breach confirmed legitimate by HIBP subscribers.

TheSquaRE__data__users-1.csv

5 columns2,226 rows

File structure

Format: CSV·Delimiter: comma·Has header: yes·Quote: "

Source column	Mapped field	Confidence	LLM assessment
0	email	high	[0] header 'Email', all values contain @ symbols and are valid email addresses
1	fullName	high	[1] header 'Full name', values are complete person names (first + last)
4	phone	high	[4] header 'Mobile number', values are phone numbers in various formats (+country codes, parentheses, spaces)
5	phone	high	[5] header 'Work phone', values are phone numbers; second phone field for same record
7	city	high	[7] header 'City', values are city/location names (Kuwait City, Essen, Bath, London, etc.)

Notes: TheSqua.re 2025 breach: 10 columns total, 5 contain PII. Columns 2 (Creation date), 3 (Enabled), 6 (Subscribed), 8 (Rewards), 9 (User type) are non-PII metadata/flags and are skipped.

TheSquaRE__data__users-10.csv

5 columns5,346 rows

File structure

Format: CSV·Delimiter: comma·Has header: yes·Quote: "

Source column	Mapped field	Confidence	LLM assessment
0	email	high	[0] header 'Email', all values are valid email addresses with @ symbol
1	fullName	high	[1] header 'Full name', values are complete person names (first + last)
4	phone	high	[4] header 'Mobile number', values are phone numbers (7-15 digits, +country codes, leading zeros)
5	phone	high	[5] header 'Work phone', values are phone numbers (same format as mobile)
7	city	high	[7] header 'City', values are city names (London, Jeddah, Singapore, etc.)

Notes: 10 columns total, 5 contain PII. Columns skipped: 'Creation date' (timestamp), 'Enabled' (boolean flag), 'Subscribed' (boolean flag), 'Rewards' (loyalty points), 'User type' (account classification). Breach confirmed: TheSqua.re serviced apartment platform, June 2025, 128,058 records with names, emails, phones, and cities exposed.

TheSquaRE__data__users-11.csv

5 columns3,815 rows

File structure

Format: CSV·Delimiter: comma·Has header: yes·Quote: "

Source column	Mapped field	Confidence	LLM assessment
0	email	high	[0] header 'Email', all values are email addresses with @ symbols
1	fullName	high	[1] header 'Full name', values are complete person names (first and last)
4	phone	high	[4] header 'Mobile number', values are phone numbers with country codes and digit patterns
5	phone	high	[5] header 'Work phone', values are phone numbers (alternative/secondary phone field)
7	city	high	[7] header 'City', values are city names (Kent, St Petersburg, London, etc.)

Notes: TheSqua.re serviced apartments breach (June 2025). File contains 10 columns; 5 are PII (email, fullName, mobile phone, work phone, city). Columns 2 (Creation date), 3 (Enabled), 6 (Subscribed), 8 (Rewards), 9 (User type) are non-PII metadata and are skipped.

TheSquaRE__data__users-12.csv

5 columns6,526 rows

File structure

Format: CSV·Delimiter: comma·Has header: yes·Quote: "

Source column	Mapped field	Confidence	LLM assessment
0	email	high	[0] header 'Email', all values contain @ symbol and are valid email addresses
1	fullName	high	[1] header 'Full name', values are person names (e.g., 'pinar wigham', 'lama naseer')
4	phone	high	[4] header 'Mobile number', values are phone numbers with various international formats (e.g., '+447703675022', '966505166060')
5	phone	high	[5] header 'Work phone', values are phone numbers (e.g., '971585912009', '+33619764090')
7	city	high	[7] header 'City', values are city names (e.g., 'jeddah', 'GURGAON', 'london', 'Dubai')

Notes: Breach from TheSqua.re (serviced apartment platform, June 2025). 10 columns total, 5 contain PII. Columns 2 (Creation date), 3 (Enabled), 6 (Subscribed), and 8 (Rewards) are non-PII and treated as skip. Column 9 (User type) is non-PII categorical data and treated as skip.

TheSquaRE__data__users-13.csv

5 columns10,500 rows

File structure

Format: CSV·Delimiter: comma·Has header: yes·Quote: "

Source column	Mapped field	Confidence	LLM assessment
0	email	high	[0] header 'Email', all values are valid email addresses with @ symbol
1	fullName	high	[1] header 'Full name', values are person names (first and last names combined)
4	phone	high	[4] header 'Mobile number', values are phone numbers with country codes and formatting
5	phone	high	[5] header 'Work phone', values are phone numbers; work phone is still a phone PII field
7	city	high	[7] header 'City', values are city names (Hartford, Paris, London, Coleraine, etc.)

Notes: Breach context: TheSqua.re serviced apartment platform, June 2025. 128,058 user records exposed. Columns 2 (Creation date), 3 (Enabled), 6 (Subscribed), 8 (Rewards), and 9 (User type) are non-PII (timestamps, flags, loyalty points) and are skipped. 5 PII columns identified and mapped.

TheSquaRE__data__users-14.csv

5 columns13,050 rows

File structure

Format: CSV·Delimiter: comma·Has header: yes·Quote: "

Source column	Mapped field	Confidence	LLM assessment
0	email	high	[0] header 'Email', all values are valid email addresses with @ domain
1	fullName	high	[1] header 'Full name', values are person names (e.g., 'abhishek rathi', 'jake gilbert')
4	phone	high	[4] header 'Mobile number', values are phone numbers with country codes and formatting (e.g., '+919028839552', '447818183482')
5	phone	high	[5] header 'Work phone', values are phone numbers with country codes (e.g., '+972598023970', '+86 18066797579')
7	city	high	[7] header 'City', values are city names (e.g., 'jerusalem', 'Colchester', 'Singapore', 'Manchester')

Notes: File is TheSqua.re user breach data. Total 10 columns: Email, Full name, Creation date (skip—timestamp), Enabled (skip—flag), Mobile number, Work phone, Subscribed (skip—flag), City, Rewards (skip—loyalty points), User type (skip—category). 5 PII columns identified.

TheSquaRE__data__users-15.csv

5 columns17,227 rows

File structure

Format: CSV·Delimiter: comma·Has header: yes·Quote: "

Source column	Mapped field	Confidence	LLM assessment
0	email	high	[0] header 'Email', all values are valid email addresses with @ symbol
1	fullName	high	[1] header 'Full name', values are complete personal names (first and last)
4	phone	high	[4] header 'Mobile number', values are phone numbers with international formats (+44, +91, +358, etc.) and 10+ digit patterns
5	phone	high	[5] header 'Work phone', values are phone numbers with international formats; multiple phone fields are valid per rules
7	city	high	[7] header 'City', values are city names (Madison, CARDIFF, Groningen, Fahad alahmad, Amman)

Notes: TheSqua.re breach: 10 columns total, 5 contain PII. Columns skipped: 'Creation date' (timestamp, non-DOB), 'Enabled' (status flag), 'Subscribed' (boolean flag), 'Rewards' (points/counter), 'User type' (category flag). All PII columns mapped.

TheSquaRE__data__users-16.csv

5 columns16,285 rows

File structure

Format: CSV·Delimiter: comma·Has header: yes·Quote: "

Source column	Mapped field	Confidence	LLM assessment
0	email	high	[0] header 'Email', all values contain @ symbol and are valid email addresses
1	fullName	high	[1] header 'Full name', values are full person names (e.g., 'anees', 'romessa nasir', 'cassie', 'mozah alkuwari')
4	phone	high	[4] header 'Mobile number', values are phone numbers with country codes and 10+ digits (e.g., '+9715001085', '7802533730', '+447985595051')
5	phone	high	[5] header 'Work phone', values are phone numbers (e.g., '+6596305651', '7327792059', '01483575575')
7	city	high	[7] header 'City', values are city names (e.g., 'LONDON', 'Singapore', 'Lakewood', 'Dubai', 'Farnham')

Notes: TheSqua.re breach dataset; 10 columns total, 5 contain PII (email, fullName, two phone fields, city). Columns 'Creation date', 'Enabled', 'Subscribed', 'Rewards', and 'User type' are non-PII metadata (timestamps, flags, points, user classification) and excluded from mapping.

TheSquaRE__data__users-17.csv

6 columns27,224 rows

File structure

Format: CSV·Delimiter: comma·Has header: yes·Quote: "

Source column	Mapped field	Confidence	LLM assessment
0	email	high	[0] header 'Email', values are valid email addresses with @ symbols
1	fullName	high	[1] header 'Full name', values are complete person names
4	phone	high	[4] header 'Mobile number', values are phone numbers (10-11+ digits)
5	phone	high	[5] header 'Work phone', values are work phone numbers (same PII field as mobile)
7	city	high	[7] header 'City', maps to city PII field
12	country	high	[12] header 'User Current Country', values are country names (United States)

Notes: 13 columns total, 6 contain PII. Columns [2] (Creation date), [3] (Enabled), [6] (Subscribed), [8] (Rewards), [9] (User type), [10] (User Preferred City), [11] (User Current City — appears to be redundant with [12]) are non-PII metadata and are skipped. Breach context confirms: full names, emails, phone numbers, cities, and country data were exposed in TheSqua.re 2025 breach.

TheSquaRE__data__users-18.csv

6 columns14,092 rows

File structure

Format: CSV·Delimiter: comma·Has header: yes·Quote: "

Source column	Mapped field	Confidence	LLM assessment
0	email	high	[0] header 'Email', values are valid email addresses with @ symbol
1	fullName	high	[1] header 'Full name', values are complete person names
4	phone	high	[4] header 'Mobile number', values are numeric phone numbers (8-11 digits)
5	phone	high	[5] header 'Work phone', values are numeric phone numbers
7	city	high	[7] header 'City', values are city names (London, Zephyrhills, etc.)
12	country	high	[12] header 'User Current Country', values are country names

Notes: 13 columns total, 6 contain PII. Columns [2] (Creation date), [3] (Enabled), [6] (Subscribed), [8] (Rewards), [9] (User type), [10] (User Preferred City), [11] (User Current City) are non-PII and automatically skipped. Breach context confirms email, full name, phone, city, and country exposure.

TheSquaRE__data__users-2.csv

5 columns2,120 rows

File structure

Format: CSV·Delimiter: comma·Has header: yes·Quote: "

Source column	Mapped field	Confidence	LLM assessment
0	email	high	[0] header 'Email', values contain @ symbols and email addresses
1	fullName	high	[1] header 'Full name', values are complete person names
4	phone	high	[4] header 'Mobile number', values are phone numbers with various international formats
5	phone	high	[5] header 'Work phone', values are phone numbers (work/business contact numbers)
7	city	high	[7] header 'City', values are city names

Notes: TheSqua.re booking platform breach with 128,058 user records. Columns 2 (Creation date), 3 (Enabled), 6 (Subscribed), 8 (Rewards), and 9 (User type) are skipped as non-PII (timestamps, flags, points counters, user classification). PII identified: email, fullName, mobile phone, work phone, and city.

TheSquaRE__data__users-3.csv

5 columns2,521 rows

File structure

Format: CSV·Delimiter: comma·Has header: yes·Quote: "

Source column	Mapped field	Confidence	LLM assessment
0	email	high	[0] header 'Email', all values are valid email addresses with @ symbol
1	fullName	high	[1] header 'Full name', values are complete names (first and last)
4	phone	high	[4] header 'Mobile number', values are phone numbers in various formats (07863630794, 91746253, +39/320.4316.610, etc.)
5	phone	high	[5] header 'Work phone', values are phone numbers (mostly empty but contains +44098867433, +447405138619, etc.)
7	city	high	[7] header 'City', values are city names (Averøy, Hella, Preston, Washington, Florence, etc.)

Notes: 10 columns total; 5 contain PII. Columns 2 (Creation date), 3 (Enabled), 6 (Subscribed), 8 (Rewards), and 9 (User type) are non-PII metadata (timestamps, flags, loyalty points) and are skipped.

TheSquaRE__data__users-4.csv

5 columns2,878 rows

File structure

Format: CSV·Delimiter: comma·Has header: yes·Quote: "

Source column	Mapped field	Confidence	LLM assessment
0	email	high	[0] header 'Email', all values are email addresses with @ symbols
1	fullName	high	[1] header 'Full name', values are complete person names
4	phone	high	[4] header 'Mobile number', values are mobile phone numbers (7-15 digits, international formats)
5	phone	high	[5] header 'Work phone', values are work phone numbers (same PII type as mobile)
7	city	high	[7] header 'City', values are city names (London, Paris, New York, Singapore, Hong Kong, etc.)

Notes: 10 columns total, 5 contain PII. Columns 2 (Creation date), 3 (Enabled), 6 (Subscribed), 8 (Rewards), and 9 (User type) are non-PII metadata (timestamps, flags, points, account type) and are skipped. Breach context confirms full names, phone numbers, cities, and email addresses were exposed.

TheSquaRE__data__users-5.csv

5 columns3,177 rows

File structure

Format: CSV·Delimiter: comma·Has header: yes·Quote: "

Source column	Mapped field	Confidence	LLM assessment
0	email	high	[0] header 'Email', all values contain @ and are valid email addresses
1	fullName	high	[1] header 'Full name', values are complete person names (first + last)
4	phone	high	[4] header 'Mobile number', values are phone numbers (7-15 digits, some with country codes)
5	phone	high	[5] header 'Work phone', values are phone numbers when present
7	city	high	[7] header 'City', values are city/location names (London, New Delhi, Singapore, etc.)

Notes: Columns 2 (Creation date), 3 (Enabled), 6 (Subscribed), 8 (Rewards), 9 (User type) are non-PII and excluded. The file contains 128,058 user records from TheSqua.re breach; 5 PII columns identified: email, fullName, mobile phone, work phone, and city.

TheSquaRE__data__users-6.csv

5 columns3,149 rows

File structure

Format: CSV·Delimiter: comma·Has header: yes·Quote: "

Source column	Mapped field	Confidence	LLM assessment
0	email	high	[0] header 'Email', all values are valid email addresses with @ symbols
1	fullName	high	[1] header 'Full name', values are complete names (e.g., 'Ashraf Eldessouky', 'Rami ALJABRI', 'mathew tibbenham')
4	phone	high	[4] header 'Mobile number', values are phone numbers (e.g., '7931616581', '787448721', '+49 17660925967', '07789764720')
5	phone	high	[5] header 'Work phone', values are phone numbers (e.g., '+447481180204', '97143583333', '0207 1172913')
7	city	high	[7] header 'City', values are city names (e.g., 'London', 'Dubai', 'Roncq', 'Teltow')

Notes: 10 columns total, 5 contain PII. Columns 2 (Creation date), 3 (Enabled), 6 (Subscribed), 8 (Rewards), and 9 (User type) are non-PII and skipped (timestamps, flags, loyalty points, user classification codes).

TheSquaRE__data__users-7.csv

5 columns3,304 rows

File structure

Format: CSV·Delimiter: comma·Has header: yes·Quote: "

Source column	Mapped field	Confidence	LLM assessment
0	email	high	[0] header 'Email', values contain @ signs (e.g., [email protected], [email protected])
1	fullName	high	[1] header 'Full name', values are complete person names (e.g., vanessa, linh, theo, sharon siew)
4	phone	high	[4] header 'Mobile number', values are phone numbers (e.g., 7491465510, +84376088488, 7946275020)
5	phone	high	[5] header 'Work phone', values are phone numbers (e.g., 158451284512, 722423513, 9117960827)
7	city	high	[7] header 'City', values are city names (e.g., Gurgaon, abu Dhabi, Oval, London)

Notes: 10 columns total, 5 contain PII. Columns 2 (Creation date), 3 (Enabled), 6 (Subscribed), 8 (Rewards), 9 (User type) are non-PII flags/timestamps and treated as skip.

TheSquaRE__data__users-8.csv

5 columns4,242 rows

File structure

Format: CSV·Delimiter: comma·Has header: yes·Quote: "

Source column	Mapped field	Confidence	LLM assessment
0	email	high	[0] header 'Email', values are valid email addresses with @ signs
1	fullName	high	[1] header 'Full name', values are complete person names (first and last)
4	phone	high	[4] header 'Mobile number', values are phone numbers (10+ digits, international formats with + and spaces)
5	phone	high	[5] header 'Work phone', values are phone numbers where present
7	city	high	[7] header 'City', values are city names (Bengaluru, London, New York, etc.)

Notes: 10 columns total, 5 contain PII. Columns 2 (Creation date), 3 (Enabled), 6 (Subscribed), 8 (Rewards), and 9 (User type) are non-PII metadata and skipped. Creation date is a timestamp (skip), Enabled/Subscribed are flags (skip), Rewards and User type are transactional/categorical data (skip).

TheSquaRE__data__users-9.csv

5 columns4,151 rows

File structure

Format: CSV·Delimiter: comma·Has header: yes·Quote: "

Source column	Mapped field	Confidence	LLM assessment
0	email	high	[0] header 'Email', all values are valid email addresses with @ symbol
1	fullName	high	[1] header 'Full name', values are complete person names
4	phone	high	[4] header 'Mobile number', values are phone numbers (10+ digits, international formats with +, UK 07xxx patterns)
5	phone	high	[5] header 'Work phone', values are phone numbers when present (international formats, UK patterns)
7	city	high	[7] header 'City', values are city names (London, Sheffield, Kuala Lumpur, Johannesburg, Madrid, etc.)

Notes: TheSqua.re breach: 128,058 user records. Columns 2 (Creation date), 3 (Enabled), 6 (Subscribed), 8 (Rewards), and 9 (User type) are non-PII and skipped. All PII columns identified: email, fullName, phone (mobile and work).