ChimeraZ claims leak of AMF database with 11,173 records
Threat actor ChimeraZ posted on a cybercrime forum a 49 MB file it claims is a database from the AMF, France's financial markets regulator, with 11,173 records of regulated entities. The claim is unverified and part of the data may overlap with what the AMF already publishes openly. Regulated firms should watch for phishing that impersonates the regulator.
What happened
An actor known as ChimeraZ posted on a cybercrime forum a 49 MB file it claims is a database from the AMF, France's financial markets regulator. The set would contain 11,173 records of regulated entities with names, identifiers, addresses and authorizations. The AMF has not confirmed and no official statement exists.
Why it matters
The data appears to be entity-level records, not passwords or credentials, and part may overlap with information the AMF already publishes openly. Still, company identification data feeds targeted scams and messages impersonating the regulator. Firms regulated by the AMF or doing business in France are the most exposed audience.
What to do
Warn teams about messages impersonating the AMF and confirm official channels before responding to any regulator request. Monitor mentions of the company name in the released material. Await an official AMF statement.
For the technical team
- Affected
- AMF (Autorité des marchés financiers) Base de dados atribuída à Autorité des marchés financiers (AMF), regulador dos mercados financeiros da França; alegado a · Database attributed to the AMF: 11,173 records of regulated market participants, investment funds and related legal entities, with internal identifiers, company names, creation dates, legal forms, addresses, regulatory authorizations and investment management information.
- Exploitation
- Claim posted by actor ChimeraZ on a cybercrime forum and reported by DailyDarkWeb and DarkWebInformer. Unverified; no AMF confirmation or official statement.
- Fix
- No fix applicable; no confirmed intrusion. Monitor phishing and use of the released data.
- Vector
- Alleged data leak, no intrusion vector described. The sources do not state how the actor obtained the database; DarkWebInformer says it remains unclear whether the records came from a breach or from publicly accessible regulatory information.
- More details
- JSONL file of about 49 MB published across multiple download platforms, according to DarkWebInformer. DailyDarkWeb notes the sample looks like entity-level regulatory data rather than personal credentials, and part of it may overlap with data the AMF publishes openly. Source recommendation: regulated firms should watch for phishing impersonating the regulator.
Timeline
Batch identifies the actor as ChimeraZ and details the volume: 49 MB and 11,173 records on regulated entities.
Forum post claims AMF database leak with about 11,173 records.
Sources 2 sources
- @DailyDarkWeb @DailyDarkWeb
- @DarkWebInformer @DarkWebInformer
