Alleged Capifrance Leak Exposes Data on 786,000 People
Threat actor claims to leak 3.6M records from French real estate network Capifrance.
Summary
A threat actor named ChimeraZ claims to have leaked a partial database of Capifrance, a French real estate network. The alleged leak contains 3.6 million records pertaining to approximately 786,000 individuals, including personal information, property deals, and agent data. If confirmed, this data could facilitate identity theft, phishing, and targeted scams.
Full text
Data3.6M records / 786K people Price3 forum points CountryFrance ActorChimeraZ ▣Post details TargetCapifrance (capifrance.fr) CountryFrance SectorReal Estate ClaimPartial database leaked Data3.6M records, ~786K people (3.0 GB) ObservedJun 10, 2026 Price3 forum points (paywall) ActorChimeraZ !Allegedly exposed 3.6M records / 786K people (claimed) Names & dates of birth Postal addresses Emails & phone numbers Nationality & marital status Profession & civil-status fields Property deals & transactions Mandate signatures & agent data ◱Screenshot Screenshot 1 Redacted preview ⚠Potential impact If genuine, a partial database covering around 785,000 people with names, dates of birth, addresses, contact details, nationality, marital status, and profession would be a strong basis for identity theft, phishing, and targeted scams, especially against property buyers and sellers. The deal, transaction, and signature records add financial and behavioural context that makes fraud more convincing. The contact records also flag whether identity documents were held on file, hinting at deeper data in the wider breach. This is part of a continuing series of French real-estate leaks by the same actor. Figures and authenticity are unconfirmed. iStatus Unverified Per-file samples and record counts were posted to an underground forum, with the data behind a small points paywall; the sample records and download links are not reproduced here. The claim has not been independently confirmed and Capifrance has not publicly addressed it. Want the non-redacted screenshots? Paid subscribers get all of the claim details and unredacted screenshots. Check out the threat feed or ransomware feed (whichever applies to this post), then after subscribing, search there for this alert to view the unredacted version. View pricing → DARK WEB INFORMER - THREAT INTELLIGENCE
Indicators of Compromise
- domain — capifrance.fr