Citya Immobilier Dataset Claim Covers 2.2M+ Records and ~50K Digicodes
A forum actor posting as ChimeraZ is selling what they claim is a database belonging to Citya Immobilier, a French real estate company providing property management, rental, sales and co-ownership services. The listing states that the dataset contains 2,249,970 lines associated with 1,139,584 people and 1,833 agencies. The actor also advertises approximately 50,000 building access codes across three JSON files, including 49,025 digicodes in the largest file. Visible samples show names, phone numbers, email addresses, postal addresses, appointment details, agency information, property details and access-related fields such as digicodes and intercom information. The archive is listed as 1.92 GB, with the price set as make an offer and payment requested in XMR. The claim is unverified.
▣Post details
!What the post claims
- 2,249,970 lines
- 1,139,584 people
- 1,833 agencies
- Approximately 50,000 digicodes
- 1.1M_dossiers.json with 49,025 digicodes
- 1.0M_dossiers.json with 535 digicodes
- 17K_dossiers.json with 339 digicodes
- Names, phone numbers and email addresses
- Street addresses and postal codes
- Appointment dates and estimated durations
- Ordering-party and expert information
- Tenant, owner and property-manager information
- Building and residence information
- Digicodes and intercom details
- Floor, door, parking, garage and box fields
- Construction year, surface area and room counts
- Property type
- 2.1K samples advertised
- Price listed as make an offer
- XMR payment with escrow accepted
◱Screenshots
☷Mapped techniques
The actor does not describe how Citya Immobilier was accessed or how the data was extracted. The technique below is inferred from the structured records displayed in the listing.
- Collection T1213 Data from Information Repositories Inferred The samples show structured appointment, customer, agency, property and access-control-related fields stored together in JSON records, which is consistent with collection from an internal information repository or business application.
⚠Potential impact
If authentic, the dataset presents a significant privacy and physical-security concern because it appears to combine identity and contact information with detailed property records and building access information. Names, phone numbers, email addresses and addresses could support phishing, impersonation and fraud, while appointment and property-management records provide additional context for highly targeted social engineering. The claimed exposure of roughly 50,000 digicodes, together with intercom, residence, floor, door, parking and garage information, could also create risks extending beyond online abuse to unauthorized physical access if any of those codes remain valid.
iStatus Unverified
The forum post provides detailed record counts, file names, sample JSON records and multiple sample-download locations. It also breaks out the number of claimed digicodes contained in each file and states that the full archive is 1.92 GB. However, the listing does not explain how the data was obtained, when any unauthorized access occurred or whether the exposed access codes remain active. Dark Web Informer has not independently verified the dataset, the stated record counts or the validity of any claimed building access information.
Dark Web Informer // Threat Intelligence
