A hacker has claimed to have leaked a huge dump of data of Karage, a large automotive service platform in Saudi Arabia.
Karage is an influential player in the automotive industry in the region as it has mobile apps on iOS and Android, more than 15,000 monthly active users, and the reported transaction value of more than 209 billion Saudi riyals.
The data release is claimed to occur after 30 days, following the company’s failure to pay a $3,000 ransom in Bitcoin. The breached data, which is now reportedly being traded on a dark web forum, poses a significant threat to the company, its workforce, and its clients.
Scope of the damage
The threat actor says the dump has diverse types of sensitive data that would be used with ill intentions. The scope of the damage is still under estimation, yet the first claims indicate to a broad spectrum breach on the digital assets of the company.
The supposedly leaked data consists of: Entire customer base with name, phone numbers, vehicle license plates, and car models, All transaction history since 2016-2025, Internal workshop documentation, Employee database, Source code of unreleased applications.