Hacker claims data breach at Infogreffe

A hacker has claimed to have accessed Infogreffe, a French service that provides information on companies and legal documents, and extracted sensitive technical data. The message mentions 3.7 million elements but does not specify their exact nature or what they represent.

Publication on pirate forum details the claim

A publication on a pirate forum attributes the alleged intrusion to a group of young hackers, possibly the same individual behind previous similar actions. The list of extracted data includes profile fields, connection parameters, application identifiers, and technical secrets.

Unclear extent of the breach

The hacker's message describes the incident as a full compromise of the Infogreffe site, but this characterization comes from the author of the publication. The actual scope of the breach, its duration, or the systems involved remains unknown. The figure "3.7M" lacks context, making it unclear whether it refers to people, records, or other units.

Extracted data includes technical access details

The hacker claims to have obtained administrator SMTP connection information, a secret key, host names, an email address, and an IP address. SMTP is the protocol used for sending emails. These details could indicate potential access capabilities if they are authentic and still functional.

List includes user credentials and technical identifiers

The inventory also includes usernames, passwords, account identifiers, timestamps, email addresses, and group information. Other entries relate to application components such as connection drivers, methods, and identifiers. These do not provide enough information to reconstruct a database or understand the relationships between the data fields.

Hacker targets multiple French websites

The hacker has made several announcements targeting various French websites, including some in the public sector. The profile on the pirate forum indicates the user registered in September 2026, with 18 messages and 11 discussions, suggesting a level of activity on the platform. However, this does not reveal the user's identity, age, or technical expertise.