The data was stolen from the CityBee car-sharing platform, specifically from a backup database that had been left publicly accessible on a server [1, 5].
Use services like Have I Been Pwned to see if your email address has appeared in "duombaze.rar" or other public breaches.
Immediately update passwords for any accounts that reused the credentials found in the leak [1].
Duombaze.rar May 2026
The data was stolen from the CityBee car-sharing platform, specifically from a backup database that had been left publicly accessible on a server [1, 5].
Use services like Have I Been Pwned to see if your email address has appeared in "duombaze.rar" or other public breaches.
Immediately update passwords for any accounts that reused the credentials found in the leak [1].