A threat actor using the handle HexDex is offering for sale a dataset of 116,122 records allegedly taken from Santeo.net, the French health insurance comparison platform operated by CAPIFINANCE. The dataset reportedly spans 2001–2026 and contains extensive PII—including 102,236 unique email addresses, roughly 100,000 phone numbers, full names, dates of birth, addresses, and detailed insurance policy information; a 1,000-record sample is available and the seller is soliciting offers via qTox and Session. #HexDex #SanteoNet
Keypoints
- HexDex claims to be selling 116,122 user records from Santeo.net, operated by CAPIFINANCE.
- The dataset allegedly spans 2001–2026 and includes 102,236 unique email addresses and roughly 100,000 phone numbers.
- Compromised data types include full names, dates of birth, phone numbers, physical addresses, postal codes, and detailed insurance policy information (provider names, premiums, coverage options, signature dates, and agent data).
- A 1,000-record JSON-formatted sample is provided with the listing for verification or download.
- The threat actor is accepting offers via qTox and Session with no fixed asking price, and the incident is classified as High severity.
DarkWebInformer.com Providing intel from some of the darkest places on the Dark Web & Clearnet. Breaches, Darknet Markets, Ransomware, Threat Alerts, & more!