DreamUp Breach

DreamUp, the U.S. space education company, was listed by the LAPSUS$ extortion group in early March 2026 as part of a claimed data-theft incident.

Based on DataBreach.com’s parsing of the exposed files, the dataset appears to be substantially broader and more sensitive than a basic email-only leak. Our review found approximately 1.7 million email address entries, 213,000 phone numbers, 224,000 street addresses, and about 7,600 names. That mix suggests the exposed material consists primarily of contact and location-related information, rather than highly sensitive identity or financial records. We did not identify evidence in the parsed data of Social Security numbers, payment card information, or medical data.