Alduin Claims AMF Breach Exposed Town Hall Passwords
Summary
A forum actor using the name Alduin alleges a union-based SQL injection at amf[.]asso[.]fr exposed town hall login addresses and plaintext passwords, plus other account and subscriber data. The claim is unverified.
Key points
- A forum actor posting as Alduin claims to have accessed amf[.]asso[.]fr using a union-based SQL injection.
- The post alleges three extracted tables, including about 114,000 subscriber records.
- Reported subscriber data includes officials’ names, work emails, job titles, and communes.
- One account table reportedly contains bcrypt hashes and super administrator flags.
- The most serious claim is that a table included town hall login addresses and plaintext passwords; the alleged breach remains unverified.
Article Details
- Victim Organization
- Association des Maires de France
- Victim Domain
- amf.asso.fr
- Incident Type
- Alleged data breach involving a union-based SQL injection
- Data Types Exposed
- Town hall login addresses
- Plaintext passwords
- Subscriber names
- Work email addresses
- Job titles
- Communes
- Account data
- Bcrypt password hashes
- Super administrator flags
- Affected Records
- Approximately 114,000 subscriber records were reportedly extracted; the total number of affected records is unknown.
- Operational Impact
- Unknown; the article does not report operational disruption.
- Ransom Or Extortion
- None reported.
- Claim Status
- claimed