Skip to content
Data of 7.7 Million Waze Users Allegedly for Sale on Dark Web

Data of 7.7 Million Waze Users Allegedly for Sale on Dark Web

First seen 22 Oct 2026, 19:43 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 22, 2026 at 21:13 UTC
  • •Nearly 7.7 million Waze users' data is allegedly for sale on the dark web.
  • •The dataset includes sensitive information such as real-time GPS locations and user IDs.
  • •The Malaysian government has banned Waze for civil servants due to data security concerns.

A threat actor has claimed to sell personal data of nearly 7.7 million Waze users on a dark web marketplace. The dataset reportedly includes usernames, unique user IDs, travel history, and real-time GPS locations. Cybersecurity firm ClearPhish highlighted the potential risks, including stalking and identity theft, due to the sensitive nature of the data. Previous vulnerabilities in Waze's API have raised concerns about the app's security, although Google has patched some issues. The Malaysian government has reacted by banning civil servants from using Waze, citing data misuse concerns. As of now, Google has not confirmed the breach, and users are advised to take precautionary measures to protect their data.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2025-02-01
ClearPhish report published
ClearPhish reported on the sale of Waze user data on dark web marketplaces, highlighting security flaws.
Bernama
2026-10-21
Malaysian government bans Waze for civil servants
The ban was implemented due to concerns over potential misuse of personal data by the Israeli regime.
Bernama
2026-10-22
Threat actor claims to sell Waze user data
A threat actor announced on a dark web marketplace that they are selling data of nearly 7.7 million Waze users.
Bernama

More articles in this cluster (2)

Following this threat?

Track Google in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 4

Common questions

What data is included in the breach?
The dataset reportedly includes usernames, unique user IDs, travel history, and real-time GPS locations.
What should Waze users do?
Users are advised to update passwords, disable background location tracking, and remain vigilant against phishing attempts.
Has Google confirmed the breach?
No, as of now, Google has not officially confirmed the alleged breach.