France data breaches target political parties and vehicle registrations

A series of significant data breaches in France has targeted both political organizations and private citizen data. A hacker known as ChimeraZ has claimed responsibility for leaking a database containing approximately 905,000 vehicle registration plates. Analysis suggests these records link license plates to sensitive personal information, including names, postal addresses, email addresses, and mobile phone numbers.

In addition to the vehicle data, the hacker released files allegedly belonging to the political party La France insoumise (LFI). These files include data related to door-to-door campaigning, exposing the contact details of approximately 5,900 individuals, including organizers and militants. Because these files link names to political activities, the information is classified as sensitive under GDPR regulations.

The French Communist Party (PCF) has confirmed a data breach involving its members, while other political groups, including Renaissance, have denied similar intrusions. While the source of the vehicle registration leak remains unconfirmed, the hacker claims to have exploited a vulnerable website rather than official government systems like the SIV or ANTS.