Cybercriminal Offers 905000 French License Plates For Sale

A cybercriminal operating under the alias ChimeraZ has claimed responsibility for stealing a massive database containing hundreds of thousands of French license plate numbers linked to personal information. The breach, which surfaced on the dark web on Saturday, October 24, 2026, was initially reported by specialized media outlet French Breaches.

Although the vehicle registration numbers are publicly visible every day on streets and in parking lots, security experts note that combining them with personal names, telephone numbers, and residential addresses significantly increases security risks. According to the seller's claims, the compromised data file includes 847064 distinct license plates, 506003 email addresses, and 474906 phone numbers, alongside full names and postal addresses.

At this stage, the claims made by ChimeraZ have not been confirmed by any official source, and the specific origin of the database remains completely unknown. Furthermore, the dataset does not appear to contain sensitive financial credentials, such as bank account details, passwords, or social security numbers.

Security analysts warn that the primary danger of such a leak lies in targeted phishing scams, fraudulent fines, and identity theft. Because malicious actors can pair a victim's real name and license plate number with accurate contact details, fraudulent communications become much harder to detect and appear authentic to recipients.

Authorities and cybersecurity observers advise the public to remain highly cautious of unsolicited messages demanding immediate payment or urging hasty action through suspicious links sent via text message or email. Official agencies typically do not pressure citizens to settle fees within an hour.

As the situation develops, investigators and cybersecurity watchdogs are monitoring for any official confirmation of the breach and attempting to identify the organization that may have suffered the data loss amid a broader wave of recent high-profile cybersecurity incidents across the country.