FranceMedia & BroadcastingUser & Organization DataLeak ClaimUnverifiedARTE.TV Data Leak Claim Lists 673,760 Records With 604,083 Email Addresses
Overview
An actor using the handle "Chimera" claims to have leaked a database associated with ARTE.TV, the French-German television channel focused on culture, documentaries, films and current affairs.
The listing advertises 673,760 lines in a 175 MB JSONL dataset, including 604,083 email addresses, 170,958 usernames, 12,369 organizations, 10,521 phone numbers and records from 29 sources. The visible sample fields include email, UUIDs, source tags, names, role information, school or organization identifiers, newsletter status and account-enablement metadata. The dataset, its source, the stated counts and current availability have not been independently verified.
Post details
FranceWhat the post claims
- 673,760 total lines
- 604,083 email addresses
- 170,958 usernames
- 12,369 organizations
- 10,521 phone numbers
- 29 source categories
- 175 MB dataset size
- JSONL format
- Email field included
- UUID fields included
- Source / source-list fields included
- First- and last-name fields included
- User-role fields included
- School / organization identifiers included
- Newsletter status included
- Enabled / blacklist status fields included
- Sample records displayed
- Hidden download requires 4 points
The visible samples contain direct email addresses, names and account identifiers. Those individual values are not transcribed in this report.
Screenshots
IOCs & identifiers
Identifiers directly visible or supported by the supplied material. These support correlation and do not independently verify the dataset claim.
| Type | Identifier | Source |
|---|---|---|
| Actor handle | Chimera | Screenshots 1–2 |
| Telegram | @chimeradbs | Screenshot 2 |
| XMPP | chimeraz@xmpp.is | Screenshot 2 |
| Named organization domain | arte[.]tv | Screenshots 1–2 |
The organization domain identifies the entity named in the claim, not malicious infrastructure. No malware hash, Tox ID, Session ID or attacker-controlled IP address is visible in the supplied screenshots. Personal email addresses, UUIDs and names shown in the samples are intentionally not reproduced here.
Mapped techniques
Claimed identifies behavior explicitly described by the actor. Inferred identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified.
- CollectionT1213.006Data from Information Repositories: DatabasesInferredThe listing presents a structured JSONL dataset containing account, contact, organization and role-related fields. The supplied material does not disclose how the data was obtained or independently establish unauthorized access to ARTE systems.
Potential impact
If authentic, the claimed dataset could expose email addresses, usernames, names, phone numbers, organization associations, user roles and account-status metadata. The combination could support targeted phishing, account impersonation, credential-harvesting attempts or profiling of ARTE users and affiliated organizations.
Status Unverified
Dark Web Informer has not independently verified the dataset's authenticity, source, completeness, 673,760-line count, email, username, organization or phone totals, 175 MB size, sample contents or current availability. The supplied screenshots document the listing and visible samples, not independent confirmation of the underlying data.
