{"id":5264,"date":"2026-10-15T03:28:20","date_gmt":"2026-10-15T03:28:20","guid":{"rendered":"https:\/\/cyberasia.io\/?p=5264"},"modified":"2026-10-15T03:28:24","modified_gmt":"2026-10-15T03:28:24","slug":"lunarissec-infogreffe-alert","status":"publish","type":"post","link":"https:\/\/cyberasia.io\/article\/data-leak\/lunarissec-infogreffe-alert\/","title":{"rendered":"LunarisSec Infogreffe Alert: 3,708,531 Lines Spark Concern"},"content":{"rendered":"\n

The LunarisSec Infogreffe post, dated October 10, 2026, names the French business registry portal infogreffe.fr<\/mark><\/strong> as a target and attaches a figure of 3,708,531 lines. The group pushed it out on its messaging channel and on X, tagged with Algeria and France hashtags and the label #databreach. CyberAsia.io has found no public response from Infogreffe or French authorities at the time of writing.<\/p>\n\n\n\n

\"Figure
Figure 1 : LunarisSec Infogreffe post screenshots showing a channel message dated October 10, 2026 and an X post listing 3708531 lines<\/figcaption><\/figure>\n\n\n\n

What the Screenshots Show<\/h2>\n\n\n\n

Figure 1 stitches two captures together. The upper half is the channel post. A banner shows armed figures in tactical gear with an infogreffe logo pasted over one corner. Below it, the text says the official website of infogreffe.fr had a critical vulnerability, then adds the group’s slogan: “We don’t break the rules, we rewrite them<\/em>.” The post ends with a link to the group’s X account and the hashtags #LunarisSec, #Algeria and #Mission.<\/p>\n\n\n\n

The lower half is an X post from an account with an Algerian flag in its display name. It reads Pwned by LunarisSec next to infogreffe.fr, then lists four handles: Cyb\u039er, Pwn2dd, Hex@py and 0xDzz. Under that sits the number 3708531 followed by the word lines. At capture time the post was one day old and showed 4 reposts, 12 likes and 912 views.<\/p>\n\n\n\n

Those numbers are small. Low engagement on the LunarisSec<\/mark><\/strong> Infogreffe post neither proves nor disproves anything about the data.<\/p>\n\n\n\n

The first attachment in the X post is a dark capture with the group’s emblem in the center and a grey redaction bar on the left. Text fragments around it look like structured records, including strings that resemble email addresses and true or false flags. Everything is too small and cropped to read in full, so CyberAsia.io is not quoting individual entries.<\/p>\n\n\n\n

What 3,708,531 Lines Can and Cannot Mean<\/h2>\n\n\n\n

A line count measures rows in a file. It does not count people. One person can appear on many rows, and one row can hold anything from a full account record to a single log entry. Without a sample that outsiders can inspect, the figure cannot say whether the lines contain customer accounts, registry data, server logs or something else.<\/p>\n\n\n\n

The number does sit in the same range as a figure the French data regulator CNIL cited in 2022, when it described 3.7 million Infogreffe user accounts. The LunarisSec Infogreffe post draws no link between the two, and a similar order of magnitude proves nothing on its own. It is only worth noting because the post says nothing about what the file holds.<\/p>\n\n\n\n

Treat the figure as a statement by the group, not as an audited count.<\/p>\n\n\n\n

What Infogreffe Is and Why the Name Draws Attention<\/h2>\n\n\n\n

Infogreffe was set up in 1986 by France’s commercial court clerks as an economic interest grouping. Its official website<\/mark><\/a><\/strong> lets users pay to consult legal information on companies and to order certified documents issued by the commercial court registries. Company registry data is meant to be accessible. User accounts, billing details and order histories are a different matter.<\/p>\n\n\n\n

In September 2022, the CNIL<\/mark><\/a><\/strong> fined the operator 250,000 euros under deliberation SAN-2022-018, after finding that it kept user data too long and protected it poorly. Non-temporary passwords were sent by email in clear text and stored in clear text in the database. After the inspection, the operator began purging accounts inactive for more than 36 months and tightening security.<\/p>\n\n\n\n

That history is background, not evidence about the LunarisSec Infogreffe post. It does explain why a new report about the portal gets read closely in France.<\/p>\n\n\n\n

The LunarisSec Infogreffe Post in the Context of 2026<\/h2>\n\n\n\n
\"Figure
Figure 2 : LunarisSec logo with a top-hatted cartoon figure and the words we are team, tied to the Infogreffe post<\/figcaption><\/figure>\n\n\n\n

Figure 2 shows the group’s emblem. A round badge with a ring of stars frames a cartoon gentleman in a top hat, with a mustache and a monocle marked by an X. The name runs along the top and the words we are team along the bottom. The same imagery appears in the channel banner and in the X attachment.<\/p>\n\n\n\n

The name is not new to French readers. Earlier in 2026, BuzzArena<\/mark><\/strong> reported that the group said it had alerted ANSSI<\/mark><\/strong>, the national cybersecurity agency, about a possible SQL injection flaw on the impots.gouv.fr homepage, without extracting data. That outlet noted the alert had no official confirmation. In August, Born City covered an incident involving SOS Villages and TF1<\/mark><\/strong> Info that carried the group’s name, and IT-Connect cited the FrenchBreaches tracker in a roundup of leaks hitting French state services.<\/p>\n\n\n\n

None of those reports confirm anything about the LunarisSec Infogreffe post. They show the group repeatedly choosing French public and public-interest services as its subjects. The #Mission tag points to a series of posts rather than a single event.<\/p>\n\n\n\n

https:\/\/cyberasia.io\/articles\/<\/mark><\/a><\/strong>: related CyberAsia.io coverage of French public sector data leaks<\/p>\n\n\n\n

Steps for Account Holders and IT Teams<\/h2>\n\n\n\n

Until Infogreffe says more, a cautious response costs little.<\/p>\n\n\n\n