Infogreffe: 3.7 million rows claimed, the registry calls it a "minor" incident

On October 10, 2026, an individual posted a message on a cybercriminal forum claiming to have breached the website of Infogreffe, the online service of the French commercial court registries. The hacker claims 3,708,531 rows of data, offered as a free download. As of the evening of October 11, Infogreffe had neither confirmed nor denied the incident, according to the sites Fuites Infos and ZATAZ.

What the hacker claims

According to ZATAZ, the post mentions user profiles (usernames, passwords, account identifiers, email addresses) as well as technical secrets: credentials for a mail server, a secret key, and items related to Keycloak authentication and a payment API. These are only claims. There is no evidence at this stage that these secrets are genuine or usable, or that any payment service was affected.

The figure of 3.7 million rows says nothing about the number of people affected. The same person can appear hundreds of times in a log file.

What the sample shows

Fuites Infos analyzed a sample published by the hacker, and it is much more modest than the announcement. It is mostly an application audit log tied to the register of security interests in movable property, covering the period from July 24 to October 10, 2026. It contains about a thousand distinct events, many of which repeat more than 400 times. This log contains no passwords or keys.

It includes 244 distinct email addresses entered as login identifiers, along with the IP addresses and timestamps of each attempt. A small configuration file contains two secret values, whose validity has not been established.

According to ZATAZ, the same account, registered on the forum in September 2026, has posted other claims targeting French organizations, including France Pare-Brise, the CGT (a French trade union), the Office français de la biodiversité (the French biodiversity agency) and the Centre national du droit du travail. ZATAZ believes it is probably a single person, even though the post refers to a group.

Best practices

• Be wary of emails claiming to come from Infogreffe or a court registry, especially if they mention an urgent formality, a payment or a password reset.
• Do not log in from a link received by email: type the site's address yourself.
• Change your Infogreffe password as a precaution, as well as on any other service where the same password is used.
• Enable two-factor authentication wherever it is offered.
• In case of fraud, get help from cybermalveillance.gouv.fr.

Update of October 13, 2026

Infogreffe, the online service of the French commercial court registries, has responded to the claim posted on October 10 on a cybercriminal forum. The organization acknowledges a cybersecurity incident that it describes as "minor". According to Les Affiches parisiennes and the site TPE Actu, the incident affects the technical environment of a digital platform that is still in development.

According to TPE Actu, Infogreffe says that no registry business data and no user passwords were identified in the material published by the hacker. It reports no impact on its production services. A crisis team has been activated. The organization has not specified the date or origin of the incident, and it has not given any number of people affected. It has not asked its users to change their passwords. It has also said nothing about any notification to the CNIL (the French data protection authority).

This account is consistent with the sample analyzed by Fuites Infos, which is far more limited than the 3.7 million rows announced. The advice to be cautious with emails claiming to come from Infogreffe remains valid.