France
Automotive
Threat Actor Claims to Sell a Carvivo Automotive Lead Database Affecting Millions in France
A threat actor using the alias DumpsecV2 ("Dumpsec") claims to be selling a large dataset stolen from Carvivo, a French SaaS provider whose "Carvivo Contact" platform manages automotive sales leads for car dealerships across Europe. The post advertises files totaling millions of records, including roughly 3.2 million unique email addresses and about 5 million vehicle plate numbers, priced at 5,000 EUR. The claim is unverified and Carvivo has not publicly addressed it.
France▣Post details
France!Allegedly exposed
- ~14M people across two files (claimed)
- 3.2M unique email addresses
- 5M+ vehicle plate numbers
- Contact / prospect names
- Phone numbers (primary & secondary)
- Vehicle make, model, mileage & price
- Registration & VIN data
- Dealership / sales-outlet assignment
- Lead notes & enquiry details
- Opt-in / marketing status
Screenshot
⚠Potential impact
If genuine, a dataset spanning millions of automotive leads, names, emails, phone numbers, vehicle registration and plate data, and dealer notes, would be highly valuable for spam, phishing, and vehicle-related fraud. The seller explicitly markets the emails for spam and the plate numbers for fraudulent reuse, and plate-to-owner linkage is especially sensitive. As with any large for-sale listing, the figures may be inflated or partly recycled from earlier data.
iStatus
UnverifiedSample files, proof galleries, and a sale price were posted to an underground forum, with a Session contact for buyers; the sample links, galleries, contact identifiers, and the personal records shown in the post are not reproduced here. The claim has not been independently confirmed and Carvivo has not publicly addressed it.
DARK WEB INFORMER - THREAT INTELLIGENCE
