Capifrance Hit by Major Data Breach: Hacker Exposes 3.6 Million Records of 785,000 Individuals
A cyberattack targeting Capifrance, one of France’s largest networks of independent real estate advisors, has resulted in the theft of 3.6 million records, affecting over 785,000 individuals. The breach, carried out by a hacker known as "ChimerAz", involved the compromise of a legitimate account within the company’s system, allowing unauthorized access to sensitive data.
The stolen information includes personal contact details (phone numbers and emails), real estate transaction records, commercial follow-up files, and property dossier references. The data, totaling approximately 3 GB, was extracted by the same threat actor previously responsible for breaches at Leboncoin Immobilier and Propriétés Privés.
In an interview with cybersecurity specialist SaxX, ChimerAz claimed to have additional targets already compromised, with plans to release more stolen data in the coming days. The incident underscores France’s ongoing struggle with large-scale data leaks, following recent breaches at Urssaf (1.2 million accounts), Easy Cash (92,000 clients), and Darty (80,000 clients).
Capifrance’s breach highlights the persistent vulnerabilities in corporate and institutional cybersecurity, as attackers continue to exploit weaknesses in data protection measures. The full extent of the impact on affected individuals remains under investigation.
Capifrance TPRM report: https://www.rankiteo.com/company/capifrance
Easy Cash TPRM report: https://www.rankiteo.com/company/propeasy
"id": "cappro1781167660",
"linkid": "capifrance, propeasy",
"type": "Breach",
"date": "6/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '785,000 individuals',
'industry': 'Real Estate',
'location': 'France',
'name': 'Capifrance',
'type': 'Real estate network'}],
'attack_vector': 'Compromised legitimate account',
'data_breach': {'data_exfiltration': 'Yes (3 GB of data extracted)',
'number_of_records_exposed': '3.6 million',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (personally identifiable '
'information)',
'type_of_data_compromised': ['Personal contact details (phone '
'numbers and emails)',
'Real estate transaction records',
'Commercial follow-up files',
'Property dossier references']},
'description': 'A cyberattack targeting Capifrance, one of France’s largest '
'networks of independent real estate advisors, has resulted in '
'the theft of 3.6 million records, affecting over 785,000 '
'individuals. The breach was carried out by a hacker known as '
"'ChimerAz', who compromised a legitimate account within the "
'company’s system, allowing unauthorized access to sensitive '
'data. The stolen information includes personal contact '
'details, real estate transaction records, commercial '
'follow-up files, and property dossier references. The data, '
'totaling approximately 3 GB, was extracted by the same threat '
'actor previously responsible for breaches at Leboncoin '
'Immobilier and Propriétés Privés.',
'impact': {'brand_reputation_impact': 'Persistent vulnerabilities in '
'corporate cybersecurity highlighted',
'data_compromised': '3.6 million records (3 GB of data)',
'identity_theft_risk': 'High (personal contact details exposed)'},
'initial_access_broker': {'entry_point': 'Compromised legitimate account'},
'investigation_status': 'Under investigation',
'references': [{'source': 'Cybersecurity specialist SaxX'}],
'threat_actor': 'ChimerAz',
'title': 'Capifrance Hit by Major Data Breach: Hacker Exposes 3.6 Million '
'Records of 785,000 Individuals',
'type': 'Data Breach'}