Hacker claims to have French license plate data

A hacker using the name ChimeraZ has claimed to have access to a database containing nearly 850,000 French license plates, each linked to personal details such as names, addresses, phone numbers, and email addresses. The data was uploaded to a cybercriminal forum on October 24, 2026, and consists of a 175-megabyte archive with 905,097 lines of information.

Database includes housing details

The data was analyzed by the monitoring site FrenchBreaches, which found that in some cases, the database includes information about housing. ChimeraZ, who has been linked to previous breaches such as those involving the French Shooting Federation and the French Communist Party, stated the data was obtained from a vulnerable website, though the name of that site has not been disclosed.

Scope of personal information unclear

The database reportedly includes 847,064 unique license plates, 506,003 email addresses, and 474,906 distinct phone numbers. However, the exact number of individuals affected is unknown, as some people may own multiple vehicles. The data spans from 2017 to 2026, suggesting it was collected over nearly a decade. ChimeraZ also mentioned a second, larger database, but no proof of its existence has been provided.

No financial information included

According to screenshots published by FrenchBreaches, the data does not include passwords or bank details. No organization has publicly confirmed the breach, and there is no evidence that the French government’s Vehicle Registration System (SIV) was compromised.

Risks of identity theft and scams

The data could be used for scams such as fake fines or fraudulent calls from supposed garages, as a license plate combined with a mobile number and address can create highly convincing fraud. It also allows someone to determine which vehicle is parked in front of a particular home.

Authorities advise caution

French authorities have recommended that drivers verify any fine by checking the notice number on the official website of the ANTAI, rather than clicking on links received via SMS. Suspicious messages should be reported to the number 33700 and also submitted to the website Cybermalveillance.gouv.fr.