Actor Claims to Have Exposed Zenfirst User, Lead and Invoice Records
Summary
A forum actor using the name Alduin claims to have exposed Zenfirst user, lead, and invoice records. The leak is unverified; the described personal and billing data could enable phishing and invoice fraud.
Key points
- A forum actor posting as Alduin claims to have exposed Zenfirst records.
- The alleged files include users.jsonl, leads.jsonl, and invoices.jsonl.
- Visible fields reportedly include names, email addresses, phone numbers, and company details.
- The data also appears to include Stripe identifiers, SIRET values, and invoice metadata such as invoice numbers and due dates.
- The claim is unverified; if authentic, the information could support phishing, invoice fraud, or business email compromise.
Article Details
- Victim Organization
- Zenfirst
- Incident Type
- Alleged exposure of user, lead, and invoice records
- Data Types Exposed
- Names
- Email addresses
- Phone numbers
- Company details
- Stripe identifiers
- SIRET values
- Invoice metadata
- Claim Status
- claimed