Skip to content
Tips? Soon

Illicit Access to France's Vehicle Registration System SIV Allegedly Offered For Sale

Breach Report France flagFrance Government Access for Sale

Illicit Access to France's Vehicle Registration System SIV Allegedly Offered For Sale

A threat actor using the alias shabat is advertising the sale of unauthorized access to France's SIV (Système d'Immatriculation des Véhicules), the country's official national vehicle-registration system. The listing offers “Acces SIV” for around $2,000 and claims the access can be used to carry out a range of vehicle-registration procedures, including ownership transfers, sale and purchase declarations, duplicate registration certificates (carte grise), address changes, and vehicle imports. If genuine, such access would enable fraudulent manipulation of official vehicle records. The claim and the nature of the access are unverified.

TypeSystem access
Price$2,000
CountryFrance flagFrance
Actorshabat

Post details

TargetSIV (Système d'Immatriculation des Véhicules)
CountryFrance flagFrance
SectorGovernment / Automotive
ClaimUnauthorized SIV access for sale
CapabilityVehicle-registration procedures (fraud risk)
Price$2,000 (access)
ObservedJun 23, 2026
Actorshabat

!Allegedly offered

  • Unauthorized SIV access (claimed)
  • Vehicle ownership transfers
  • Sale & purchase declarations
  • Duplicate registration certificates
  • Vehicle address changes
  • Vehicle imports
  • Registration card reissuance
  • Priced around $2,000

Screenshot

Potential impact

This is a high-severity listing because it offers unauthorized access to an official government vehicle-registration system rather than a static dataset. If genuine, such access would allow an attacker to fraudulently alter vehicle records: transferring ownership, registering imported or stolen vehicles, issuing duplicate or co-titled registration certificates (cartes grises), and changing registered addresses. This kind of capability is commonly sought for vehicle laundering (giving stolen cars a clean registration history), document fraud, and resale scams, and it undermines the integrity of official records that insurers, police, and buyers rely on. No access credentials, methods, proofs, or seller contact details are reproduced here. The legitimacy of the access is unverified.

iStatus

Unverified

The seller posted a price, a list of offered procedures, and “proofs” plus contact details. The claim has not been independently confirmed, and there is no public confirmation that the SIV has been compromised.

Want the non-redacted screenshots? Paid subscribers get all of the claim details and unredacted screenshots. Check out the threat feed or ransomware feed (whichever applies to this post), then after subscribing, search there for this alert to view the unredacted version. View pricing →

DARK WEB INFORMER - THREAT INTELLIGENCE

Latest