Actor alleges leak of France's fishing-licence database
A threat actor on an underground forum claims to be sharing a database from Carte de pêche, France's national online fishing-licence service. According to the actor, the dataset includes full names, dates of birth, ages, postal codes and order data, with files spanning 2012 to 2026 and a breach date of Sep 15, 2026. The claim is unverified and unconfirmed by the platform; monitor official statements and warn about fake licence-renewal phishing.
What happened
A threat actor on an underground forum claims to be sharing a database labelled "Carte-de-pêche", the name of France's national online fishing-licence service. According to the claim, the dataset includes full names, dates of birth, ages, postal codes and order data, with files spanning 2012 to 2026 and a breach date of Sep 15, 2026. DailyDarkWeb, which reported the claim, stresses that it has not been independently verified.
Why it matters
If confirmed, the leak would expose personal data of fishing-licence holders in France. According to DailyDarkWeb, records pairing names with dates of birth and home towns aid targeted phishing, such as fake licence-renewal or payment emails. The listing shows no emails or phone numbers, and neither the platform nor its operator has confirmed the scope.
What to do
Treat this as an unconfirmed claim. Monitor official communications from Carte de pêche and its operator and prepare a holder-notification plan if the leak is confirmed. Reinforce guidance against fake licence-renewal emails.
For the technical team
- Affected
- Carte de pêche (serviço nacional de licenças de pesca online da França) · Carte de pêche, France's national online fishing-licence service; files spanning 2012 to 2026, according to the actor.
- Exploitation
- Leak claim posted on an underground forum and reported by DailyDarkWeb. No confirmation from the platform, its operator or independent verification. No vulnerability is cited in the source.
- Fix
- No fix cited in the sources.
- Vector
- Not described in the sources; the actor only claims access to the licence-service database, with no method details.
- More details
- The actor gives a breach date of Sep 15, 2026. Claimed fields: order dates and numbers, licence and product types, full names and titles, dates of birth and ages, postal codes, towns and country, registration dates and new-member status. Sample rows appear to be licence orders from French anglers. According to DailyDarkWeb's analyst note, the listing shows no emails or phone numbers.
Timeline
Incident opened.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
