ACF Assurances Base de segurados da ACF… · Breach

Actor Alduin alleges leak of 23,000 ACF Assurances records

Oct 27, 2026 · 1 min read

Actor Alduin claims to hold policyholder data from ACF Assurances, a French insurance brokerage, and advertised 23,000 records for sale on a forum. The 6.8 MB dataset reportedly contains names, emails, mobile numbers, dates of birth and addresses, with samples published. Source and authenticity are unverified; companies using the brokerage should check exposure and watch for fraud attempts.

By HIFY Radar newsroom Updated 10/27/2026 04:57 PM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

An actor named Alduin claims on a forum to have obtained 23,000 policyholder records from ACF Assurances, a French insurance brokerage. Samples with personal data were published, in an advertisement reported on October 27, 2026. The source and authenticity of the 6.8 MB dataset have not been confirmed.

Why it matters

If confirmed, it exposes client names, emails, mobile numbers, dates of birth, addresses, postal codes and cities, fuel for phishing and identity fraud. Companies with employees or clients tied to the brokerage may face targeted scams. So far this is only the attacker's claim, with no confirmation from the victim.

What to do

Contact ACF Assurances or your local broker to confirm the incident. Check whether any clients or employees have data in that base. Alert security and antifraud teams to watch for suspicious contact attempts.

For the technical team

Affected: ACF Assurances Base de segurados da ACF Assurances, corretora de seguros francesa, segundo alegação do ator Alduin · Customer base of ACF Assurances, a French insurance brokerage, per the actor's claim. No specific system or software named in the sources.
Exploitation: No technical exploitation reported. Actor Alduin advertised the 23,000 records for sale on a forum, with samples published, according to DarkWebInformer on 2026-10-27.
Fix: Not applicable. Alleged data leak, with no patchable product cited in the sources.
More details: The advertised dataset is 6.8 MB and reportedly contains names, emails, mobile numbers, dates of birth, residential addresses, postal codes and cities. Authenticity and source not independently verified, per DarkWebInformer. First report on 2026-10-27 at 19:57.