Dark web market lists over 7.6 million Waze user records for sale

ClearPhish disclosed that a dark-web seller is offering a database containing over 7.6 million Waze user profiles for purchase. The compilation reportedly holds personal identifiers, GPS location data and detailed travel logs. If the data proves genuine, it could enable malicious actors to stalk individuals, infer daily routes or orchestrate targeted assaults.

Earlier, researcher Peter Gasper identified vulnerabilities in Waze’s API that permitted real-time movement tracking; Google has claimed to have remedied some of those weaknesses. Nonetheless, the latest allegations revive doubts about lingering security gaps in the service. Waze has responded by stating that its navigation platform does not pose a security threat, even as authorities have prohibited civil servants from using the app.