France
Real Estate
Proprietes-Privees Data Breach: 3.2M Records on 2.5M People Leaked
A threat actor using the alias ChimeraZ claims to have breached Proprietes-Privees.com, a French real-estate network operating through independent property consultants. The actor says a simple API request let them retrieve admin-mailbox credentials and extract a 2.65 GB database, advertised at 3.28 million records covering about 2.53 million people. Notably, the actor names Proprietes-Privees as the source behind the recently leaked "Leboncoin Immobilier" listings. The exposed data reportedly includes financial profiles, contact details, agent accounts with passwords, and payment records. The claim is unverified.
France▣Post details
France!Allegedly exposed
- 3.2M records / 2.5M people (claimed)
- Names, emails & phone numbers
- Postal addresses
- Financial profiles (income, savings, tax)
- Property mandates & valuations
- 9K+ agent accounts with passwords
- Payment / transaction records
- Appointment & activity history
◱Screenshots
⚠Potential impact
If genuine, this is a severe, multi-layered breach: around 2.5 million people with contact details and, for many, detailed financial profiles (income, savings, taxes, and wealth indicators), plus property mandates and valuations. Most damaging are the roughly 9,000 agent accounts said to include plaintext passwords (some with admin and email access) and a set of payment transaction records, which together enable account takeover, fraud, and highly targeted scams against wealthy property clients. The actor also frames Proprietes-Privees as the upstream source of the earlier "Leboncoin Immobilier" leak and of further breaches to come. Figures and authenticity are unconfirmed.
iStatus
UnverifiedPer-file breakdowns and samples were posted to an underground forum, with downloads behind a small points paywall; the sample records, credentials, payment data, and download links are not reproduced here. The actor also claimed to hold internal media files, which we have not verified and do not detail. The claim has not been independently confirmed and Proprietes-Privees has not publicly addressed it.
DARK WEB INFORMER - THREAT INTELLIGENCE
