The leak prompted a massive investigation by the Lithuanian police and the State Data Protection Inspectorate (VDAI) [2]. CityBee eventually faced significant fines for failing to ensure adequate security measures [4]. Security Recommendations for Users If you believe your data was part of this or similar leaks:
Use services like Have I Been Pwned to see if your email address has appeared in "duombaze.rar" or other public breaches.
The leaked archive contained user names, surnames, personal identification numbers (ID codes), email addresses, phone numbers, and hashed passwords [1, 3]. It did not include payment card details [3, 4].
Activate two-factor authentication on all sensitive accounts (email, banking, social media) to add a layer of protection beyond just a password [5].