FrenchBreaches
frenchbreaches · C · active
Added 2026-09-06 as this run's ONE new candidate source (S4). French breach-alert tracker (frenchbreaches.com), surfaced the Association des maires de France SQL-injection breach with more granular technical detail (table-level data categories, bcrypt-vs-plaintext password distinction) than general-interest press picking it up a day later. FETCH -> python3 tools/fetch_source.py extract <alert-URL> (trafilatura direct, confirmed clean 2026-09-06). Candidate -> promote to active after 3 contributing runs. | 2026-09-07: promoted candidate -> active (3 contributing runs per state digest promotion_due; used again this run as primary for the ChimeraZ/Aveyron entry). | 2026-09-29: reliability B -> C: a leak-claim tracker, parity with ransomware-live and databreaches-net (both C); leads only, corroborate from the victim or A/B journalism. (2026-09-29 operator-directed setup review) | 2026-10-02 (2026-10-02T0404Z-intel): `extract` of the homepage returns a single entry; WebFetch returns the dated entries with /alertes/<slug> hrefs and `extract` reads each /alertes page cleanly. Recipe: WebFetch listing, then `extract`. | 2026-10-11 quality audit: the homepage shows only the 18 newest entries; feed https://frenchbreaches.com/feed.xml 40 (alerts) and https://frenchbreaches.com/blog/feed.xml 40 (blog) carry dated items; extract reads each page.
Cited in 8 entries
Citation cadence
Citation days per ISO week (9 weeks of coverage span, total 8).
- AFPA (France's national adult vocational-training agency) confirms a data extraction potentially affecting up to 1.7 million people, linked to a flaw in a third-party-hosted accommodation-management tool2026-09-21
- A small French commune confirms a ransomware attack and data theft, days after the extortion actor Kairos claimed it on its leak site2026-09-17
- France's Ministry of Ecological Transition confirms a 'sophisticated' attack on mail systems; a criminal separately claims 22,000+ records via an IDOR flaw in its inspection-oversight tool2026-09-08
- ChimeraZ claims France's Département de l'Aveyron employment platform, exposing 20,000+ people's data including 1,499 CVs, a customer account without MFA, an IDOR flaw and a misconfigured Odoo database, per one of two trackers who reviewed the leak2026-09-07
- Association des maires de France confirms a UNION-based SQL-injection breach exposing 114,000 records on mayors, municipal councillors and territorial agents, plaintext passwords included2026-09-06
- La Protection Civile (France): eProtec volunteer-management platform breach, 525,000+ profiles including minors, intrusion dated to March 2026 discovered mid-August2026-08-28
- Metabase CVE-2026-72898: an unauthenticated SQL-injection zero-day gave attackers administrator access to BI instances, exploited since at least 3 August, with VenariX counting fifteen downstream victims2026-08-09
- CCI Nice Côte d'Azur: a compromised administrator account on the chamber's jobseeker platform was used to run the platform's own export function2026-08-02