France
Government
Personnel & Contact Data
Partial Leak
Unverified
French Ministry of Justice Partial Database Leak Claim Lists 7,135 People
Overview
An actor using the handle "ChimeraZ" claims to have leaked a partial database associated with France's Ministry of Justice. The listing describes Justice.fr as the official French website providing information about the justice system and legal procedures.
The post advertises 7,138 lines corresponding to 7,135 people in a 340 KB CSV file. A sample row is shown containing a numeric identifier, a person's name and an email address using the justice.fr domain. Multiple download mirrors are listed in the source material, but those links are not reproduced here. The dataset, its source, its completeness and the stated record counts have not been independently verified.
Post details
FranceWhat the post claims
- Partial database leak
- 7,138 lines advertised
- 7,135 people advertised
- CSV format
- 340 KB file size
- Sample row displayed
- Numeric identifier visible in sample
- Name visible in sample
- Justice.fr email address visible in sample
- Multiple download mirrors provided
- Actor states Session is the only contact method
The visible sample indicates the file contains person-level contact information, but the screenshot does not show the full schema or establish whether every row contains the same fields. The personal details shown in the sample are not transcribed in this report.
Screenshots
IOCs & contact identifiers
Identifiers directly visible or supported by the supplied material. These support correlation and do not independently verify the dataset claim.
| Type | Identifier | Source |
|---|---|---|
| Actor handle | ChimeraZ | Screenshot 1 |
| Named organization domain | justice[.]fr | Screenshot 1 |
The domain identifies the organization named in the claim, not malicious infrastructure. The source screenshot contains direct download mirrors to the purported leaked dataset; those links are intentionally not reproduced here. A Session contact method is mentioned, but no Session ID is visible in the supplied capture. No Tox ID, malware hash or attacker-controlled IP address is visible. Personal identifiers shown in the sample are not included in this table. URLs to any data will always be blurred out, but are available for subscribers on the threat feed or ransomware feed.
Mapped techniques
Claimed identifies behavior explicitly described by the actor. Inferred identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified.
- Collection T1213.006 Data from Information Repositories: Databases Inferred The listing presents a structured CSV database containing person-level identifiers and contact information. The supplied material does not reveal how the data was obtained or independently establish unauthorized access to Ministry of Justice systems.
Potential impact
If authentic, the claimed dataset could expose names, government email addresses and internal identifiers associated with thousands of individuals. Depending on who is represented in the file, the material could support targeted phishing, impersonation or other social-engineering activity against Ministry of Justice personnel or related users.
Status Unverified
Dark Web Informer has not independently verified the dataset's authenticity, source, completeness, 7,138-line count, 7,135-person count, sample contents or current availability. The supplied screenshot documents the listing and a single sample row, not independent confirmation of the full database.
