France
Higher Education
Student & User Data
Leak Claim
Unverified
ISEP France User Database Leak Claim Lists 5,088 People Across 5,091 JSON Records
Overview
An actor using the handle "ChimeraZ" claims to have leaked a user dataset associated with ISEP, a French engineering school specializing in digital technology, computer science, electronics and cybersecurity.
The listing advertises 5,091 lines representing 5,088 people in a 720 KB JSON dataset. Three files are referenced, containing user and employee-related records with fields such as names, employee or student types, institutional email addresses, internal identifiers, city, country, activity status and timezone information. The dataset, its source, the stated counts and current availability have not been independently verified.
Post details
FranceWhat the post claims
- 5,091 lines advertised
- 5,088 people advertised
- 720 KB total size
- JSON format
- 2.6K_utilisateurs.json referenced
- 2.4K_utilisateurs.json referenced
- 37_utilisateurs.json referenced
- Employee or student-type fields included
- Names included
- Institutional email addresses included
- Internal identifiers included
- City and country fields included
- Activity-status fields included
- Timezone information included
- Multiple download mirrors provided
The visible samples show student or employee profile records from the three referenced JSON files. Personal names, email addresses and internal identifiers shown in the samples are not transcribed in this report.
Screenshots
IOCs & identifiers
Identifiers directly visible or supported by the supplied material. These support correlation and do not independently verify the dataset claim.
| Type | Identifier | Source |
|---|---|---|
| Actor handle | ChimeraZ | Screenshot 1 |
| Named organization domain | isep[.]fr | Screenshot 1 |
The domain identifies the organization named in the claim, not malicious infrastructure. The source screenshot states that the actor uses Session rather than Telegram, but no Session ID is visible in the supplied capture. No malware hash, Tox ID or attacker-controlled IP address is visible. Direct download mirrors shown in the source material are intentionally not reproduced here.
Mapped techniques
Claimed identifies behavior explicitly described by the actor. Inferred identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified.
- Collection T1213.006 Data from Information Repositories: Databases Inferred The listing presents structured user datasets containing student or employee identity and contact information. The supplied material does not reveal how the data was obtained or independently establish unauthorized access to ISEP systems.
Potential impact
If authentic, the claimed dataset could expose student or employee names, institutional email addresses, internal identifiers, location information and account-status metadata. The combination could support targeted phishing, impersonation or other social-engineering activity involving ISEP users.
Status Unverified
Dark Web Informer has not independently verified the dataset's authenticity, source, completeness, 5,091-line count, 5,088-person count, sample contents or current availability. The supplied screenshot documents the listing and visible sample records, not independent confirmation of the underlying data.
