Actor claims theft of 242 million Auto-Planning records
Actor ChimeraZ is selling a 34.6 GB dataset on a forum that it claims was stolen from Auto-Planning, a French appointment management software provider for vehicle inspection centers, garages, and driving schools. The listing claims 242,460,397 database entries, phone numbers, vehicle license plates, invoices, and SMS records, with 7 servers compromised and 767 inspection centers affected; DarkWebInformer reports the claim as unverified. Customers should watch for phone, SMS, and email scams.
What happened
A threat actor named ChimeraZ is advertising the sale of 34.6 GB of data it claims was stolen from Auto-Planning, a French scheduling software provider for vehicle inspection centers, garages, and driving schools. The listing includes 242,460,397 database entries, phone numbers, emails, vehicle license plates, appointment histories, and invoices. The breach is unconfirmed.
Why it matters
If confirmed, the leak would expose customer and vehicle data from 767 inspection centers and 694 domains, according to the listing. Names, phone numbers, and license plates enable phone, SMS, and email fraud against drivers and workshops. Auto-Planning faces potential loss of customer trust.
What to do
Check whether your company uses Auto-Planning or APFR products and await an official statement from the vendor. Warn customers about scams referencing appointments, vehicles, or invoices. Monitor for publication of the full dataset.
For the technical team
- Affected
- Auto-Planning (APFR) Auto-Planning, software francês de gestão de agendamentos para centros de inspeção veicular, oficinas e autoescolas · Auto-Planning (APFR), French appointment management software for vehicle inspection centers, garages, and driving schools. The listing claims 767 inspection centers and 694 domains affected.
- Exploitation
- Sale announced on a forum by actor ChimeraZ, with 80,000 sample records published and offers being accepted for the full dataset. Claim unverified, according to DarkWebInformer.
- Fix
- Not applicable: alleged data leak, no software fix cited in the sources.
- Vector
- Intrusion method not described in the source. The actor's listing claims 7 Auto-Planning/APFR servers were compromised.
- More details
- Source: DarkWebInformer on X. Advertised data: 242,460,397 database entries, 5.26 million unique phone numbers, 5.19 million unique names, 2.27 million vehicle license plates, 1.6 million unique email addresses, plus appointment histories, invoices, SMS records, and customer information. No victim confirmation so far.
Timeline
First appearance of the listing: actor ChimeraZ announces sale of the 34.6 GB dataset on a forum.
Sources 1 source
- @DarkWebInformer @DarkWebInformer
