Skip to content

Bergerat Rent Data Allegedly Leaked in Eleventh Release, With the Shared Platform Now Named

Breach Report France flagFrance Business Software / Equipment Rental Free Download

Bergerat Rent Data Allegedly Leaked in Eleventh Release, With the Shared Platform Now Named

A forum user posting as ChimeraZ has published what they describe as the database of bergerat-rent.com, a French company renting construction, industrial and handling equipment, comprising 43GB across 132,433 files. The actor labels this the eleventh release in a numbered series and states openly that the source is BlgCloud, a shared business management platform, confirming the common origin that identifiers in earlier releases had only implied. The material spans full email content, CRM contact records with coordinates and financial exposure fields, and invoice documents. The actor has again named the next target for release the following day. The claim is unverified.

Volume43GB
Files132,433
SeriesRelease 11
ActorChimeraZ

Post details

Targetbergerat-rent.com
CountryFrance flagFrance
SectorEquipment rental
ListingFree, reply to unlock
Volume43GB, 132,433 files
Stated sourceBlgCloud platform
Observed
ActorChimeraZ

!Allegedly included

  • Full email message content
  • Sender and recipient details
  • Email attachments
  • CRM contact records
  • Business and personal names
  • Job titles
  • Postal addresses
  • Geographic coordinates
  • Contact email addresses
  • Bank account detail fields
  • Outstanding credit limits
  • Insurance exposure fields
  • Invoices and PDFs
  • Document file hashes

Screenshot

Potential impact

For the named company the exposure is the same shape as earlier releases in this series and no less serious for being business data. Full email content lays open commercial terms, pricing and correspondence with customers and suppliers, while CRM records tie named contacts to addresses and coordinates and carry credit limits, insurance exposure and banking detail fields that describe a counterparty's financial position. Combined with the invoice set, this supports invoice fraud and business email compromise against the company and everyone it trades with, since a fraudulent demand can quote real references and real threads. The wider point is now explicit rather than inferred: every organisation on the same platform faces the same exposure, releases are continuing on a daily cadence, and the next company has already been named.

iStatus

Unverified

This release closes a gap in the earlier reporting. When this series was at its sixth entry, the shared origin was inferred from platform identifiers appearing inside a tenant's records; the actor now names the provider directly, and the samples here again carry the operator's own support contact records inside the tenant data. That is consistent with a single upstream compromise rather than eleven unrelated ones, though the provider has still not been confirmed as the source and has not commented. Dark Web Informer is not reproducing the download location, the contact route, or the named individuals, addresses and message content in the samples. The claim is unverified and neither Bergerat Rent nor the platform operator has publicly addressed it.

Want everything on this breach? Paid subscribers get the full claim details and more. Check out the threat feed, then after subscribing, search there for this alert. View pricing →

DARK WEB INFORMER - THREAT INTELLIGENCE

Latest