Massive Database of French Internet Users Leaked Online

Sourced from several breaches, these 95 million records of information are available on an open server.

On September 25, 2024, Cybernews reported the discovery of a massive database concerning French internet users, available on an open ElasticSearch server. This search engine, often used by professionals, is known to sometimes harbor illegal information. The downloadable file, which is 30.1 GB in size, contains 95 million records, corresponding to 68 million identities.

The database appears to be a compilation of 17 past data breaches from the following organizations: Corse GSM, Darty, Discord, DVM, Electro Depot, Go-Sport, Intersport, LDLC, Lyca, Minecraft, Pandabuy, Pinterest, Rinaorc (a Minecraft server), SFR, Shadow, Snapchat, Sport2000, V and B, and Wakanim.

Several entities on this list have confirmed data breaches, such as SFR, Shadow, Go-Sport, Intersport, or Sport2000. Some, like Minecraft, frequently experience security incidents. Others, however, have never disclosed any breaches. Darty even recently denied any intrusion into its systems.

In most cases, the exposed data includes names, phone numbers, postal addresses, email addresses, and IP addresses. Some records also contain partial payment information. No passwords were involved. The primary risk posed by this database is its potential use by cybercriminals to carry out convincing phishing attacks, impersonating one of these entities.