Threat actor 888 posted a full database dump of Ledil Immobilier (ledil.immo), exposing 6,700 unique user records including names, emails, phone numbers, addresses, property and transaction details. The dataset, apparently exported from a Drupal (Search API) instance and offered as a free download on darkforums.su, greatly increases the risk of targeted fraud against buyers, agents, sellers, and notaires. #LedilImmobilier #888
Keypoints
- Threat actor 888 leaked a full Ledil Immobilier database containing 6,700 unique user records.
- Exposed data includes full names, email addresses, telephone numbers, home addresses, nationalities, and buyer search criteria.
- Mandataire and agent IDs, notaire identifiers, property details, and extensive transaction metadata are included.
- Leak appears to originate from an internal Drupal (Search API) instance (enterprise1.ledil.immo) with timestamps clustering around late 2025–April 2026.
- The dataset is distributed as a free download on darkforums.su, maximising exposure and raising the likelihood of targeted fraud and identity abuse.
DarkWebInformer.com Providing intel from some of the darkest places on the Dark Web & Clearnet. Breaches, Darknet Markets, Ransomware, Threat Alerts, & more!