Thermae 2000

Thermae 2000

Data Breach on October 02, 2023
Data Breach Report
Victimthermae.nl
Threat ActorLockBit
Date DiscoveredOct 02, 2023
DescriptionThermae 2OOO is a travel & tourism company specializing in sauna, massage, and skincare services.
Leak SizeUnknown

Credential Exposure for thermae.nl

We've indexed 19 @thermae.nl accounts from external breaches, plus 52 credentials for thermae.nl itself.

Last checked Aug 16, 2026

@thermae.nl addresses from external breaches
Third-party breaches18 accounts · across 22 breaches · 16 with a plaintext password · most recent Feb 8, 2021
Combo lists6 accounts · most recent Nov 25, 2025
Passwords for thermae.nl accounts
Combo lists46 logins · most recent Aug 15, 2026
Infostealer logs13 logins · 9 infected devices · most recent Aug 1, 2026

Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.

Is your organization next?

Thermae 2000 was breached. Check if your company's credentials have been exposed in this or other data breaches.

Check your exposure →

Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.