Chimeraz has publicly claimed possession of data linked to three French political parties: Renaissance, La France Insoumise, and the Parti Communiste Français. The cybercriminal's announcements mix offers of free partial data releases with paid sales and references to electoral prospecting files.
Millions of Records Announced, Scope Remains Unclear
After earlier claims targeting arms dealers, Chimeraz has shifted focus to the political domain. In forum posts, the actor states plans to release partial datasets tied to Renaissance and La France Insoumise at no cost, while offering a Parti Communiste Français database for sale. For Renaissance, three databases are listed with 4,157,404 total lines (4,157,403 unique), 373,906 addresses, a counter of 9,617,987 voters, and 1,547 entries labeled as employees. La France Insoumise is associated with 1,270,096 lines (1,165,256 unique), plus another file referencing 54,838 door openings and 208 individuals involved in door-to-door activity. The Parti Communiste Français sale listing cites 194,641 lines covering 183,363 individuals, 113,971 phone numbers, and 77,076 email addresses. These counts may overlap, as one person can hold multiple contact details, and line totals do not equal unique individuals.
Door-to-Door Files and Naming Similarities
The most notable overlap between the Renaissance and La France Insoumise claims lies in nearly identical file naming sequences, differing only by volume prefixes. This pattern suggests comparable data export structures but does not prove a shared technical origin or vendor. File names can be altered instantly and provide no definitive proof of source. An address appearing in a door-to-door tool does not confirm party membership or political preference; it may simply indicate a contacted residence. If the files contain response data or campaign observations, their sensitivity would increase significantly. The listings do not detail individual fields sufficiently to determine exact contents.
Potential risks include personalized fraudulent solicitations or impersonation attempts leveraging the political context. No confirmed misuse of the data has been documented so far. Comparable leaks involving La France Insoumise and Rassemblement National surfaced online in July 2026.
