On September 2nd, the Iranian Taxi Service Tapsi was targeted by a malicious attack, exposing the personal information of 27 million passengers and 6 million drivers, which in total make up a third of the country's population

These details include Internal User ID, First and last names, phone numbers, home cities, and email addresses, and device information

Over 136 million trips with exact trip start and destination which user's home addresses can be extracted from

Tapsi's Internal codebases and source code have also been leaked

A sample of the breach has been published in a Telegram channel

The breach is being sold for $35k