Les Clés de l’Atelier Dataset Allegedly Shared for Free
Overview
A poster using the handle "Syrv4x" claims to be sharing a dataset associated with Les Clés de l’Atelier for free. The listing describes the organization as a French vocational training center and apprenticeship training center (CFA) focused on secondary construction and building finishing trades.
The post advertises 10,193 lines and a 5 MB file. Its visible column list includes names, dates and places of birth, training dates, locations, schedules and other fields. A single JSON-like sample row is displayed, while the download remains hidden behind a reply requirement. The claimed dataset, volume and source have not been independently verified.
Post details
What the post claims
- 10,193 lines advertised
- 5 MB file advertised
- Dataset offered for free
- Download hidden until a reply is posted
- Name and birth details among visible fields
- Training pathway and dates among visible fields
- Schedule and location fields listed
- Disability field listed
- Correctional-related field names listed
- One JSON-like sample row displayed
- Organization website identified in listing
- No acquisition method disclosed
The listed field names describe the purported dataset schema. The presence of disability and correctional-related fields does not establish how many records contain values in those fields. The visible sample is one row, not a verified copy of the full file.
Screenshots
IOCs & contact identifiers
Identifiers visible in the listing. These support correlation and do not independently establish unauthorized access.
| Type | Identifier | Source |
|---|---|---|
| Actor handle | Syrv4x | Screenshot 1 |
| Named organization domain | lesclesdelatelier[.]fr | Screenshot 1 |
The domain identifies the organization named in the claim, not malicious infrastructure. No Tox ID, Session ID, malware hash or attacker-controlled IP address is visible. The personal identifiers in the purported sample are not included in this table. The destination of the hidden download is not visible. URLs to any data will always be blurred out, but are available to subscribers on the threat feed or ransomware feed.
Mapped techniques
Claimed identifies behavior explicitly described by the actor. Inferred identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified.
- Collection T1213.006 Data from Information Repositories: Databases Inferred The listing describes structured records and displays a JSON-like sample. This is consistent with collection from a data repository, but the screenshots do not show how the material was acquired or which system held it.
Potential impact
If the dataset is authentic, the listed names, birth details, training histories and schedules could expose personal and educational information. The schema also includes disability and correctional-related fields, which may be particularly sensitive if populated. The screenshot does not establish how many distinct people are represented or whether the advertised 10,193 lines are unique records.
Status Unverified
Dark Web Informer has not independently verified the source, authenticity, size, line count or current availability of the claimed dataset. One visible sample row and a list of field names do not establish the full file contents or an intrusion into the organization's systems. The download is concealed behind a reply requirement in the supplied capture. No response from Les Clés de l’Atelier appears in the supplied material.
