Centre-Val de Loire Regional Council Data Claim Lists 6,768 Records With IBAN and Personal Details
Overview
A poster using the handle "Syrv4x" claims to be sharing a Centre-Val de Loire Regional Council dataset. The listing describes the organization as the governing body for the Centre-Val de Loire administrative region in France.
The listing advertises 6,768 records in a 9 MB file. The visible field list includes dossier and individual identifiers, names, dates of birth, birthplace and nationality details, a field labeled NIR, email addresses, phone numbers, postal addresses, family-status information, training and remuneration fields, dossier dates and status, payment mode, account-holder details, bank domiciliation, IBAN, BIC and a URL field. One JSON-style sample is shown, while the download is hidden until a reply is posted. The dataset, its source, the claimed volume and the contents of the full file have not been independently verified.
Post details
What the post claims
- 6,768 records advertised
- 9 MB file advertised
- Dataset offered for free
- Download hidden until a reply is posted
- Dossier and individual ID fields listed
- Name, birth-name and given-name fields listed
- Date-of-birth, birthplace and nationality fields listed
- A field labeled NIR is listed
- Email and phone fields listed
- Street address, postal-code and city fields listed
- Family status and number-of-children fields listed
- Training, campaign and remuneration fields listed
- Dossier dates, status and payment-mode fields listed
- Account holder, bank domiciliation, IBAN and BIC fields listed
- One JSON-style sample displayed
- No acquisition method stated
The visible sample demonstrates that the listing contains structured identity, administrative, payment and banking-related fields, but it does not establish the full file’s existence, its source or whether all advertised fields are populated across the dataset. Personal and financial identifiers shown in the sample are not transcribed here.
Screenshots
IOCs & contact identifiers
Identifiers visible in the listing. These support correlation and do not independently establish unauthorized access.
| Type | Identifier | Source |
|---|---|---|
| Actor handle | Syrv4x | Screenshot 1 |
| Named organization domain | regioncentre-valdeloire[.]fr | Screenshot 1 |
The domain identifies the organization named in the claim, not malicious infrastructure. No Tox ID, Session ID, malware hash or attacker-controlled IP address is visible. Customer identifiers shown in the purported evidence are not included in this table. The destination of the hidden download is not visible. URLs to any data will always be blurred out, but are available for subscribers on the threat feed or ransomware feed.
Mapped techniques
Claimed identifies behavior explicitly described by the actor. Inferred identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified.
- Collection T1213.006 Data from Information Repositories: Databases Inferred The post describes the material as a database and shows structured identity, administrative, payment and banking-related fields. It does not disclose the collection method or establish unauthorized access to Centre-Val de Loire Regional Council systems.
Potential impact
If authentic, the claimed dataset could expose names, dates of birth, contact information, addresses, family-status details and banking information. A field labeled NIR is also listed. The combination could support targeted phishing, impersonation, identity fraud and other social-engineering activity, while IBAN and BIC fields could increase the sensitivity of the exposed records.
Status Unverified
Dark Web Informer has not independently verified the dataset’s authenticity, source, 9 MB size, 6,768-record count or current availability. The screenshot shows one sample rather than the full file. The download is concealed behind a reply requirement, and no response from the Centre-Val de Loire Regional Council appears in the supplied material.
