> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Alleged Sale of 116,000 User Records from French Insurance Comparison Site Santeo
- URL: https://darkwebinformer.com/alleged-sale-of-116-000-user-records-from-french-insurance-comparison-site-santeo/
- Published: 2026-02-26T17:04:48.000Z
- Updated: 2026-02-26T17:04:48.000Z
- Author: Dark Web Informer
- Tags: Data Breaches

Dark Web Informer - Cyber Threat Intelligence 

# Alleged Sale of 116,000 User Records from French Insurance Comparison Site Santeo.net

February 26, 2026 - 7:38:11 AM UTC 

![France](https://flagcdn.com/20x15/fr.png)France 

Insurance / Healthcare 

Standalone API Access Now Available High-volume threat-intelligence data, automated ingestion endpoints, ransomware feeds, IOC data, and more. 

[ View API](https://darkwebinformer.com/api-details/) 

 Unlock Exclusive Cyber Threat Intelligence

Powered by DarkWebInformer.com

Stay ahead of cyber threats with real-time breach tracking, expert analysis, and high quality evidence - built for security professionals, researchers, journalists, and everyday people who take their privacy seriously.

[ Subscribe Now](https://darkwebinformer.com/pricing) 

## Quick Facts

Date & Time 2026-02-26 07:38:11 UTC 

Threat Actor HexDex 

Victim Country ![France](https://flagcdn.com/20x15/fr.png)France 

Industry Insurance / Healthcare 

Victim Organization Santeo.net (CAPIFINANCE) 

Victim Site santeo.net 

Category Data Breach 

Severity High 

Network Open Web 

Total Records 116,122 

##  Incident Overview

A threat actor using the handle HexDex is claiming to sell personal information belonging to 116,122 individuals from Santeo.net, a French online health insurance and mutual comparison platform operated by the brokerage company CAPIFINANCE. The service has been around since 1992, helping users compare and get quotes on health insurance and complementary coverage plans across different providers.

  
The dataset allegedly spans records from 2001 through 2026 and includes 102,236 unique email addresses and roughly 100,000 unique phone numbers. Beyond basic contact information, the listing details a wide range of fields — full names, dates of birth, home and mobile phone numbers, physical addresses with postal codes and cities, as well as insurance-specific data like policy company names, monthly premiums, coverage options, signature dates, and the agents who handled the accounts.

  
A sample line included in the listing shows JSON-formatted records with detailed policy information, including insurance provider names, offer descriptions, and production dates. A 1,000-record sample file is available for download. The threat actor is accepting offers via qTox and Session, with no fixed asking price listed.

##  Compromised Data Categories

 Full Names  Email Addresses  Phone Numbers (Mobile & Landline)  Physical Addresses  Postal Codes & Cities  Dates of Birth  Insurance Policy Details  Insurance Company Names  Monthly Premiums  Coverage Options  Policy Signature Dates  Agent Information  Lead Source / Provenance 

### Claim URL - For Subscribers Only

The claim URL for this listing can be found on the **Threat Feed** or **Ransomware Feed** for subscribers.

[ Subscribe Now](https://darkwebinformer.com/pricing) 

##  Image Preview

[![Forum listing showing Santeo.net data for sale with 116,122 records](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/02/63568704099232994795.png)](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/02/63568704099232994795.png) 

Dark Web Informer © 2026 | Cyber Threat Intelligence  
[DarkWebInformer.com](https://darkwebinformer.com/)