France
Heating & Maintenance
Customer & Property Data
Leak Claim
Unverified
Adems14 Data Leak Claim Lists 100,826 Records Covering 36,628 People and Property Service Data
Overview
An actor using the handle "ChimeraZ" claims to have leaked a database associated with Adems14, a company based in Carpiquet, Normandy, specializing in heating, air conditioning and technical maintenance.
The listing advertises 100,826 lines covering 36,628 people in approximately 67 MB of JSONL data. Three datasets are shown: 54K intervention records, 43K housing/property records and 2K site records. The visible samples include service-visit details, housing contact information, addresses, email addresses, telephone fields, client references and building/site metadata. The dataset, its source, the stated counts and current availability have not been independently verified.
Post details
FranceWhat the post claims
- 100,826 total lines
- 36,628 people
- 67 MB JSONL dataset
- 54K interventions.jsonl records
- 43K logements.jsonl records
- 2K sites.jsonl records
- Service intervention dates and statuses
- Client-agreement and appointment metadata
- Housing / property records
- Names and contact information
- Email addresses and phone fields
- Street addresses and postal codes
- Building / site names
- Heating and energy-type fields
- Multiple download mirrors provided
The visible samples contain direct customer names, email addresses, phone numbers and addresses. Those personal values are not transcribed in this report.
Screenshots
IOCs & identifiers
Identifiers directly visible or supported by the supplied material. These support correlation and do not independently verify the dataset claim.
| Type | Identifier | Source |
|---|---|---|
| Actor handle | ChimeraZ | Screenshot 1 |
| Telegram | @chimeradbs | Screenshot 1 |
| XMPP | chimeraz@xmpp.is | Screenshot 1 |
| Named organization domain | adems14[.]fr | Screenshot 1 |
The organization domain identifies the entity named in the claim, not malicious infrastructure. No malware hash, Tox ID, Session ID or attacker-controlled IP address is visible in the supplied screenshot. Direct download mirrors and personal identifiers shown in the source material are intentionally not reproduced here.
Mapped techniques
Claimed identifies behavior explicitly described by the actor. Inferred identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified.
- Collection T1213.006 Data from Information Repositories: Databases Inferred The listing presents multiple structured JSONL datasets containing intervention, customer, property and site information. The supplied material does not disclose how the data was obtained or independently establish unauthorized access to Adems14 systems.
Potential impact
If authentic, the claimed dataset could expose customer names, email addresses, phone numbers, residential addresses, property records and service-intervention history. That combination could support targeted phishing, impersonation, social engineering, property-related profiling or other privacy abuse.
Status Unverified
Dark Web Informer has not independently verified the dataset's authenticity, source, completeness, 100,826-line count, 36,628-person count, 67 MB size, sample contents or current availability. The supplied screenshot documents the listing and visible samples, not independent confirmation of the underlying data.
