France
Business Software / Equipment Rental
Free Download
Bergerat Rent Data Allegedly Leaked in Eleventh Release, With the Shared Platform Now Named
A forum user posting as ChimeraZ has published what they describe as the database of bergerat-rent.com, a French company renting construction, industrial and handling equipment, comprising 43GB across 132,433 files. The actor labels this the eleventh release in a numbered series and states openly that the source is BlgCloud, a shared business management platform, confirming the common origin that identifiers in earlier releases had only implied. The material spans full email content, CRM contact records with coordinates and financial exposure fields, and invoice documents. The actor has again named the next target for release the following day. The claim is unverified.
▣Post details
France!Allegedly included
- Full email message content
- Sender and recipient details
- Email attachments
- CRM contact records
- Business and personal names
- Job titles
- Postal addresses
- Geographic coordinates
- Contact email addresses
- Bank account detail fields
- Outstanding credit limits
- Insurance exposure fields
- Invoices and PDFs
- Document file hashes
◱Screenshot
⚠Potential impact
For the named company the exposure is the same shape as earlier releases in this series and no less serious for being business data. Full email content lays open commercial terms, pricing and correspondence with customers and suppliers, while CRM records tie named contacts to addresses and coordinates and carry credit limits, insurance exposure and banking detail fields that describe a counterparty's financial position. Combined with the invoice set, this supports invoice fraud and business email compromise against the company and everyone it trades with, since a fraudulent demand can quote real references and real threads. The wider point is now explicit rather than inferred: every organisation on the same platform faces the same exposure, releases are continuing on a daily cadence, and the next company has already been named.
iStatus
UnverifiedThis release closes a gap in the earlier reporting. When this series was at its sixth entry, the shared origin was inferred from platform identifiers appearing inside a tenant's records; the actor now names the provider directly, and the samples here again carry the operator's own support contact records inside the tenant data. That is consistent with a single upstream compromise rather than eleven unrelated ones, though the provider has still not been confirmed as the source and has not commented. Dark Web Informer is not reproducing the download location, the contact route, or the named individuals, addresses and message content in the samples. The claim is unverified and neither Bergerat Rent nor the platform operator has publicly addressed it.
DARK WEB INFORMER - THREAT INTELLIGENCE