Three Actors Claim France Titres Breach, Offer 18 Million Records for Sale

Summary
EvilDump, ExtaseHunters, and Breach3d claim they breached France Titres (ANTS) and are offering 18 million citizen records for sale. The article says the data allegedly includes identity, contact, birth, address, and system details.
Key points
- EvilDump, ExtaseHunters, and Breach3d claim responsibility for breaching France Titres, France’s national identity-document agency.
- The actors reportedly offer 18 million citizen records for sale.
- The alleged dataset includes names, contact details, dates of birth, addresses, and internal system IDs.
- The article says records include a government identity-certification flag, “certifie: true.”
- Sample records reportedly show sequential internal IDs; the article presents this as suggesting structured database extraction.
Article Details
- Victim Organization
- ANTS (Agence Nationale des Titres Securises / France Titres)
- Incident Type
- Alleged data breach and sale of a database of citizen records
- Data Types Exposed
- Government-verified identity flags
- Full legal names
- Email addresses
- Verified mobile numbers
- Dates of birth
- Addresses
- Internal system identifiers
- Affected Records
- 18 million records reportedly offered for sale
- Operational Impact
- No operational disruption is reported. The exposed identity and contact data could create identity-fraud risks.
- Ransom Or Extortion
- The dataset is reportedly offered for sale, with direct-message offers and middleman escrow accepted. No ransom demand is reported.
- Claim Status
- claimed
Threat Actors
breach3dNamed as claiming responsibility for the alleged breach of ANTS and the offered citizen-record database; the breach is not independently confirmed in the article.EvilDumpNamed as claiming responsibility for the alleged breach of ANTS and the offered citizen-record database; the breach is not independently confirmed in the article.ExtaseHuntersNamed as claiming responsibility for the alleged breach of ANTS and the offered citizen-record database; the breach is not independently confirmed in the article.
