Alleged sale of France mobile database
Incident Overview
The threat actor "D3f4c3rX" is offering a massive France mobile dataset containing 160,000,000+ "verified mobile numbers, professionally processed and categorized by network operator."
According to the threat actor's post, the database includes:
- Total Records: 160,000,000+ France Mobile Numbers
- Data Format: CSV / TXT with operator identification
- Coverage: Major networks (Orange, SFR, Bouygues, Free Mobile), MVNOs, and specialized operators
Monetization details:
- Price: $20,000
- Contact: Telegram @ByteCreeper
This database is marketed as "Premium France Mobile Numbers – Ready for Marketing, SMS, HLR & Telecom Use" and is positioned for SMS marketing platforms, HLR validation, fraud analysis, and wholesale data resellers.
The sale of such a large database of mobile numbers raises significant privacy concerns under GDPR and could enable spam campaigns, phishing, and social engineering attacks.
Image Preview
🔐 Premium Subscribers Get Access To:
- Full breach claim URL and direct forum links to breach posts
- Real-Time Threat Feed (unredacted) with breaches, leaks, ransomware, DDoS, and defacement activity
- 53,300+ current alerts with fresh updates 24/7/365
- Standard Ransomware Feed (Source 1) — unredacted screenshots and URLs (25,000+ entries)
- Enhanced Ransomware Feed (Source 2) — claim URLs, screenshots, metadata (23,000+ entries)
- Live Ransomware Sites Directory with real-time status tracking (300+ groups, 600+ infrastructure locations)
- A 30 day IOC history feed and a full history IOC feed with over 145,000 IOCs and growing.
- JSON export capability for threat feeds, ransomware feeds, IOC feeds and more.
- Access to 500+ verified Onion and clearnet sources with uptime monitoring
- A lot more.
API Access for Researchers & Security Teams
SOC teams, researchers, and security professionals can integrate Dark Web Informer's threat intelligence directly into their workflows via API. Access real-time breach data, threat feeds, and monitoring capabilities programmatically.
Learn About API AccessDark Web Informer © 2025 | Cyber Threat Intelligence | DarkWebInformer.com
