Omnicasa Plataforma de gestão imobiliária da… · Breach

Actor claims sale of 4.7 million Omnicasa records

Nov 08, 2026 · 1 min read

Actor ChimeraZ announces on an underground forum the sale of a 3.9 GB database with 4,770,639 records allegedly obtained from Omnicasa, a Belgian real estate management software provider. The dataset would include 465,225 email addresses, 251,873 phone numbers, customer information, property listings, appointments, internal communications, and identity documents, with 1,000 sample records released. The claim is unverified; agencies using the platform should monitor for confirmation and prepare to notify clients.

By HIFY Radar newsroom Updated 11/08/2026 01:36 PM Get this every day →← Back to the feed 1 source

HighBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

An actor known as ChimeraZ is selling a 3.9 GB database allegedly obtained from Omnicasa, a Belgian software provider for real estate agencies. The post claims 4,770,639 records with emails, phone numbers, customer data, property listings, and identity documents. The claim is unverified.

Why it matters

If confirmed, the breach exposes personal data and identity documents of clients served by agencies using the platform, with risk of scams, fraud, and spam. Operations do not stop, but exposure can trigger notification duties and reputational damage for agencies using the product.

What to do

Ask Omnicasa for a statement, review access and permissions on the platform, and prepare a client notification plan in case the sale is confirmed.

For the technical team

Affected: Omnicasa Plataforma de gestão imobiliária da Omnicasa, fornecedora belga de software para agências · Omnicasa real estate management platform, Belgian software provider used by property agencies.
Exploitation: Sale announced on an underground forum by actor ChimeraZ, with 1,000 sample records released and open offers for the full 3.9 GB database. Claim unverified, reported by Dark Web Informer.
Fix: Not applicable; this is a data breach, with no fix cited in the sources.
More details: Announced dataset includes 4,770,639 entries, of which 465,225 email addresses and 251,873 phone numbers, plus customer information, property listings, appointments, internal communications, and identity document records. Omnicasa has not confirmed the incident.