France
Insurance
Customer & Policy Data
For Sale
Unverified
Assurimo Insurance Dataset Offered for Sale With 954,000 Records and 674,303 People
Overview
An actor using the handle "ChimeraZ" claims to be selling a dataset associated with Assurimo, a French insurance website offering multiple insurance products and services.
The listing advertises 954,000 lines representing 674,303 people in approximately 1.8 GB of JSONL data. The actor claims the material includes customer records, addresses, email addresses, phone numbers, insurance-policy identifiers, quote numbers, policy and quote details, and planned-payment data. The post also lists annual premiums including VAT totaling €1,606,514,305, SEPA entries totaling €55,434,358, and 5,665 buildings referenced in SEPA feeds. The dataset, its source, the stated counts and the actor's possession of the full material have not been independently verified.
Post details
FranceWhat the post claims
- 954,000 lines advertised
- 674,303 people advertised
- 1.8 GB JSONL dataset
- 674,303 customer records
- 346,950 addresses
- 435,754 email addresses
- 580,398 phone numbers
- 900,541 policy-number values
- 35,213 quote-number values
- Annual premiums including VAT: €1,606,514,305
- SEPA entries: €55,434,358
- 5,665 buildings referenced in SEPA feeds
- Policies.jsonl sample shown
- Quotes.jsonl sample shown
- Planned_payments.jsonl sample shown
- 3,000 samples advertised
- Price listed as offer
- XMR payment requested; escrow accepted
The screenshots also rank insurers represented in the material and list common email domains. Sample records shown in the source contain personal, policy and payment-related information; those individual values are not transcribed here.
Screenshots
IOCs & contact identifiers
Identifiers directly visible in the listing. These support correlation and do not independently verify the dataset claim.
| Type | Identifier | Source |
|---|---|---|
| Actor handle | ChimeraZ | Screenshot 1 |
| Session ID | 05c1396ee8a9d6df7ae4497a07f2fbc75b31344f5e0cbd91dacde4c04c88c4c254 | Screenshot 2 |
| Named organization domain | assurimo[.]fr | Screenshot 1 |
The domain identifies the organization named in the claim, not malicious infrastructure. No Tox ID, Telegram handle, malware hash or attacker-controlled IP address is visible. Customer, policy and payment identifiers shown in the purported evidence are not included in this table. Sample-download URLs shown in the source material are not reproduced here. URLs to any data will always be blurred out, but are available for subscribers on the threat feed or ransomware feed.
Mapped techniques
Claimed identifies behavior explicitly described by the actor. Inferred identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified.
- Collection T1213.006 Data from Information Repositories: Databases Inferred The listing presents structured customer, policy, quote and payment data across JSONL files. The supplied material does not reveal how the data was obtained or establish unauthorized access to Assurimo systems.
Potential impact
If authentic, the claimed dataset could expose names, addresses, email addresses, phone numbers, insurance policy details, quote information and payment-related records. The combination could support targeted phishing, impersonation, insurance fraud, financial abuse or other social-engineering activity involving affected customers.
Status Unverified
Dark Web Informer has not independently verified the dataset's authenticity, source, 1.8 GB size, 954,000-line count, 674,303-person count, sample contents or current availability. The supplied screenshots document the listing and sample material, not independent confirmation of the full dataset.
