On September 29, 2026, M6 Info released a video adaptation of an RTL investigation into a search engine that grants access to confidential information about millions of French citizens. The report, posted on X, explained how users could find the phone number of political figure Marine Le Pen or the contact details of footballer Kylian Mbappé with just a few clicks. While the name of the site was not disclosed to avoid giving it publicity, internet users in the comments section of the M6 Info post revealed the search engine's address. The post, which was viewed nearly 5 million times, highlighted the growing concern over the accessibility of private data. The service describes itself as an "OSINT tool," a term referring to open-source intelligence, which is typically used by journalists and cybersecurity researchers to gather publicly available information. However, the platform's promotional materials suggest a different target audience, offering promo codes for services like Netflix or Spotify and discounts from car rental companies. These tools aggregate data from leaks, hacking, or clandestine data sales, often sourced from the Dark Web. The business model involves site administrators collecting or purchasing these databases and compiling them into an accessible format on the regular web. Users can perform a few free searches by sharing an email address, but full access requires a monthly subscription of a few euros. To access the service, users must often communicate their location to an operator, whose identity and security practices are unclear. Payments are typically made through cryptocurrencies or by providing bank details, with PayPal not being an accepted method. The infrastructure of these sites is vulnerable, and their databases can be resold or exposed. For instance, in July of the previous year, a similar site was compromised, exposing data including email addresses, IP addresses, search histories, and activity logs. This means that a user’s search history could be linked to their email and IP address, potentially revealing sensitive information. Legal experts warn that using such services can lead to serious consequences. Lawyer Eléonore Favero Agostini notes that all parties in the data chain—hackers, aggregators, and users—are potentially involved in illegal activity. Thibault Douville, a professor of digital law at the University of Caen, explains that while searching for one's own information may not be illegal, collecting data on others can lead to prosecution for complicity. In France, complicity in such data misuse can result in up to five years in prison and a fine of 375,000 euros. Although no convictions have yet been made in France related to such services, the justice system is monitoring the issue closely.