A threat actor is claiming to sell a massive database allegedly stolen from hautsdefrance.fr, the official website for the Hauts-de-France region of France. The Hauts-de-France is the northernmost region of France, home to over six million inhabitants. The actor posted evidence which includes numerous examples of citizens’ personally identifiable information (PII).
According to the threat actor, the full dataset is over 1.1 TB. The allegedly compromised data includes a wide range of sensitive information:
- Full names
- Phone numbers
- Email addresses
- Physical addresses (street, city, zip code)
- Scans of official identity documents (passports, national ID cards)
- Educational and administrative documents












