---
title: "Data breach at WayToMe"
description: "An individual using the alias Quantique claimed, on September 20, 2026 on a cybercriminal forum, to have extracted data from WayToMe, a carpooling and parcel-delivery platform. The claim describes broad access obtained to a Supabase instance used by the platform, yielding several files totaling 669,"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-20-waytome
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-20
dateModified: 2026-09-20
---
# WayToMe

Data breach — Moderate

An individual using the alias Quantique claimed, on September 20, 2026 on a cybercriminal forum, to have extracted data from WayToMe, a carpooling and parcel-delivery platform. The claim describes broad access obtained to a Supabase instance used by the platform, yielding several files totaling 669,445 records, including a file of 147,287 user accounts (display names, internal identifiers, verification status, device information) and a file of 153,837 notifications containing recipient email addresses. A separate file of 363,274 trips contains geolocation data tied to users' movements. The claim has not been confirmed by WayToMe's operator at this stage.

If the claim proves accurate, cross-referencing trip records with user accounts could allow a third party to reconstruct the movements of some affected individuals.

| Fact | Value |
| --- | --- |
| Disclosed on | September 20, 2026 |
| Accounts affected | 147,287 |
| Sector | Transport and travel |
| Country | France |
| Cause | Misconfigured database |
| Severity | Moderate |
| Status | Reported |

## Exposed data

- Email address
- Full name
- Customer ID
- Connection data (IP, logs)
- Order history

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [WayToMe](https://frenchbreaches.com/alertes/waytome-muaf8bf677nfxz6peuh) — FrenchBreaches
- [WayToMe : fuite de données revendiquée visant 147 287 clients](https://fuitesinfos.fr/article/2026-09-20-waytome) — Fuites Infos
- [WayToMe : 147 000 utilisateurs et des milliers de trajets exposés après une cyberattaque](https://www.cyberattaque.org/waytome-147-000-utilisateurs-et-des-milliers-de-trajets-exposes-apres-une-cyberattaque/) — Cyberattaque.org

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-20-waytome
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees