France
Fitness & Recreation
Customer Data
For Sale
Unverified
Climb Up Customer Dataset Offered for Sale With 151,000 Records Across 29 French Gyms
Overview
An actor using the handle "Alduin" claims to be selling a Climb Up customer dataset. The post describes Climb Up as the largest network of indoor climbing gyms in France and says the material concerns customers across 29 locations.
The listing title advertises approximately 151,000 records. The visible schema includes customer IDs, names, dates of birth, age, postal addresses, phone numbers, email addresses, associated structures, online-account relationships, family or relation types, cards, record-creation and update timestamps, last-activity data and whether an account was created online. The file is described as JSONL, approximately 93,530 KB, with data ranging from January 2016 through March 2026. The dataset, its source, the stated record count and current availability have not been independently verified.
Post details
FranceWhat the post claims
- Approximately 151,000 customer records
- Customers across 29 French structures
- Customer ID fields included
- Name fields included
- Date-of-birth and age fields included
- Street address, ZIP code and city fields included
- Phone-number fields included
- Email-address fields included
- Associated structure field included
- Online-account identifiers and relations included
- Family or relationship-type fields included
- Card information included
- Created and updated timestamps included
- Last-activity field included
- Created-via-online field included
- 1,000-record sample advertised
- Price listed as make offer
- XMR-only payment requested
- Seller says only two buyers will be accepted
- Escrow accepted
The source screenshot includes two sample-download mirrors. Those links are not reproduced in this report. No personal values from the purported dataset are transcribed here.
Screenshots
IOCs & contact identifiers
Identifiers directly visible in the listing. These support correlation and do not independently verify the dataset claim.
| Type | Identifier | Source |
|---|---|---|
| Actor handle | Alduin | Screenshot 1 |
| Session ID | 058b3befaf833aba3f9de531dcc502a6b3e9b7cc54ae92405825b7509ce1723312 | Screenshot 1 |
| Named organization domain | climb-up[.]fr | Screenshot 1 |
The organization domain identifies the company named in the claim, not malicious infrastructure. No Tox ID, Telegram handle, malware hash or attacker-controlled IP address is visible in the supplied material. The source screenshot includes direct sample-download links; those URLs are intentionally not reproduced here. Personal identifiers shown or referenced in the purported dataset are not included in this table.
Mapped techniques
Claimed identifies behavior explicitly described by the actor. Inferred identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified.
- CollectionT1213.006Data from Information Repositories: DatabasesInferredThe listing presents a structured customer dataset containing identity, contact, account and activity-related fields. The supplied material does not disclose how the data was obtained or independently establish unauthorized access to Climb Up systems.
Potential impact
If authentic, the claimed dataset could expose names, dates of birth, addresses, phone numbers, email addresses, account relationships and activity metadata for Climb Up customers. That combination could support targeted phishing, impersonation, identity fraud or other privacy-related abuse.
Status Unverified
Dark Web Informer has not independently verified the dataset's authenticity, source, approximately 151,000-record count, 93,530 KB size, sample contents or current availability. The supplied screenshot documents the listing and visible field structure, not independent confirmation of the underlying data.
