[LunarisSec]

Hello everyone the LunarisSec group, I'm announcing that we've been breached into recherchesuccessionsvacantes.impots.gouv.fr

Target : recherche successions vacantes impots(impots.gov)
User : 622,022

Yesterday and a few hours ago, we discovered a vulnerability that allowed us to access users without any authorization.
Their security is truly frightening; day by day, France is burying itself.
The first decision we made was to report this vulnerability to the relevant authority (ANSSI). After fixing the vulnerability, we have already extradited all available users, including (622,022) users.
So that no one could steal our target. After one day, the vulnerability was indeed confirmed and fixed, but all of this was already part of our plan.
So we are claiming responsibility for this attack, as well as for the user.
The vulnerability and correction have already been widely reported in the media without us saying that we will claim it.
The data types 

{"version":null,"id":null,"nom":null,"nomMarital":null,"prenom":null,"dateDeces":null,"lieuDeces":null,"villeDeces":null,"dateNaissance":null,"lieuNaissance":null,"dossier":{"id":null,"version":null,"numeroDossierPrefixe":null,"villeTribunal":null,"bienAVendre":null,"dateDecision":null,"dateDeclarationSansSuite":null,"dateEnvoiGestion":null,"datePublicationInventaire":null,"datePublicationPrp":null,"dateEnvoiCrGestion":null,"dateReponseJuge":null,"dateDernierPaiement":null,"pole":{"version":null,"id":null,"nomPole":null,"emailPole":null,"ville":null,"codePostal":null,"voie":null,"numVoie":null,"hibernateLazyInitializer":null}},"nomNormalized":null,"prenomNormalized":null,"nomMaritalNormalized":null}

I'll give you simple ones on several lines
link : https://jetzip.net/fr/transfert?p=cb7e1d...454d2522b5
Contact: 0589543c49ed5bc0cd7ccc7dcd95a039a268125e143ebc82ab48910c6571b20a48

[djdjdjjdjdjdjdjdj]

this is fake HAHAHAHHAHA

[LunarisSec]

this is fake HAHAHAHHAHA

fake of what ????? what are you saying idiot that you we reported the vulnerability to anssi so that they can correct it then make the correction idiot that you next time shut up instead of talking shit 

https://android-mt.ouest-france.fr/news/...te/211379/

< It was the security researcher known under the pseudonym LunarisSec who discovered the flaw, then revealed by the specialist media FrenchBreaches. According to his findings, it was enough to go to the service concerned to consult recordings without having to identify oneself, a design flaw which makes the incident particularly worrying for a public administration.

What information was exposed and for what risks
The scope of the data concerned goes well beyond a simple list of names. Complete identities, postal and electronic addresses, dates and places of death, marital statuses, as well as elements linked to inheritance could have been freely consulted by any visitor to the site. > 

<This type of cross-referencing of information provides ideal raw material for sophisticated scams. A fraudster with the name of an heir, his address and details surrounding a death can construct a credible scenario to pose as a notary or a banking establishment responsible for settling the estate.> 

https://frenchbreaches.com/blog/dgfip-un...tification 
<LThe LunarisSec hacker group has identified a critical vulnerability in the vacant successions portal of the DGFiP (Directorate General of Public Finances). This flaw, which specifically concerned the service accessible at recherchesuccessionsvacantes.impots.gouv.fr, potentially allowed access to several million lines of personal data without prior authentication.

The information exposed included identities, postal and email addresses, dates and locations of deaths, and asset details of estates. Although the vulnerability was responsibly reported and fixed, this incident is part of a broader series of security breaches affecting French state digital services in 2026.



This type of cross-referencing of information provides ideal raw material for sophisticated scams. A fraudster with the name of an heir, his address and details surrounding a death can construct a credible scenario to pose as a notary or a banking establishment responsible for settling the estate.

FUCKING SKIDS

<Quelles informations étaient exposées et pour quels risques
Le périmètre des données concernées dépasse largement une simple liste de noms. Identités complètes, adresses postales et électroniques, dates et lieux de décès, statuts matrimoniaux, ainsi que des éléments liés au patrimoine successoral auraient pu être consultés librement par n’importe quel visiteur du site.


Ce type de croisement d’informations constitue une matière première idéale pour des escroqueries sophistiquées. Un fraudeur disposant du nom d’un héritier, de son adresse et des détails entourant un décès peut construire un scénario crédible pour se faire passer pour un notaire ou un établissement bancaire chargé du règlement de la succession.

[djdjdjjdjdjdjdjdj]

STOP TRYING TO SCAM STUPID SKID HAHAHAHHAHAHAHAHAHAHAH

[LunarisSec]

STOP TRYING TO SCAM STUPID SKID HAHAHAHHAHAHAHAHAHAHAH

send me your telegram or session skids of shits

---

STOP TRYING TO SCAM STUPID SKID HAHAHAHHAHAHAHAHAHAHAH

It was Amélie Verdier, Director General of Public Finance, who confirmed the exact chronology to the press.

Official quote: “We spotted this breach yesterday [Monday August 17] and it has already been cut, before we became aware of it [the public claim]. »
Context: She explained that illegitimate access to the vacant successions portal had been identified by the internal services of the DGFiP on the day of August 17 and immediately deactivated.
Sources: These remarks are reported verbatim by Franceinfo, Le Monde and BFM TV in their reports from the press conference of August 18.

---

STOP TRYING TO SCAM STUPID SKID HAHAHAHHAHAHAHAHAHAHAH

https://www.corsematin.com/article/econo...uccessions 

fucking skids go telegram or session skids of shit

---

STOP TRYING TO SCAM STUPID SKID HAHAHAHHAHAHAHAHAHAHAH

we spotted the flaw and signed it 1 day later we extradited all the users so that no one could steal our target and then we died claiming it as crappy skids

[djdjdjjdjdjdjdjdj]

YOURE JUST A BIG SCAMMER COME IN BELGIUM I FUCK YOUR MOM

[LunarisSec]

YOURE JUST A BIG SCAMMER COME IN BELGIUM I FUCK YOUR MOM

skids no IT to say that it's false when you have all the media in front of you proof, sample so it went on TV supposedly that the third attack would have hit once again the taxes of us have more than ten media explaining it but seeing that your mouth of the q and that your a fucking skids without skills fuck your mother whore get your throat slit

[naraaa]

YOURE JUST A BIG SCAMMER COME IN BELGIUM I FUCK YOUR MOM

skids no IT to say that it's false when you have all the media in front of you proof, sample so it went on TV supposedly that the third attack would have hit once again the taxes of us have more than ten media explaining it but seeing that your mouth of the q and that your a fucking skids without skills fuck your mother whore get your throat slit

I believe you play well.you have all my respect

[LunarisSec]

YOURE JUST A BIG SCAMMER COME IN BELGIUM I FUCK YOUR MOM

skids no IT to say that it's false when you have all the media in front of you proof, sample so it went on TV supposedly that the third attack would have hit once again the taxes of us have more than ten media explaining it but seeing that your mouth of the q and that your a fucking skids without skills fuck your mother whore get your throat slit

I believe you play well.you have all my respect

uh what ?

[berozz]

Hello everyone the LunarisSec group, I'm announcing that we've been breached into recherchesuccessionsvacantes.impots.gouv.fr

Target : recherche successions vacantes impots(impots.gov)
User : 622,022

Yesterday and a few hours ago, we discovered a vulnerability that allowed us to access users without any authorization.
Their security is truly frightening; day by day, France is burying itself.
The first decision we made was to report this vulnerability to the relevant authority (ANSSI). After fixing the vulnerability, we have already extradited all available users, including (622,022) users.
So that no one could steal our target. After one day, the vulnerability was indeed confirmed and fixed, but all of this was already part of our plan.
So we are claiming responsibility for this attack, as well as for the user.
The vulnerability and correction have already been widely reported in the media without us saying that we will claim it.
The data types 

{"version":null,"id":null,"nom":null,"nomMarital":null,"prenom":null,"dateDeces":null,"lieuDeces":null,"villeDeces":null,"dateNaissance":null,"lieuNaissance":null,"dossier":{"id":null,"version":null,"numeroDossierPrefixe":null,"villeTribunal":null,"bienAVendre":null,"dateDecision":null,"dateDeclarationSansSuite":null,"dateEnvoiGestion":null,"datePublicationInventaire":null,"datePublicationPrp":null,"dateEnvoiCrGestion":null,"dateReponseJuge":null,"dateDernierPaiement":null,"pole":{"version":null,"id":null,"nomPole":null,"emailPole":null,"ville":null,"codePostal":null,"voie":null,"numVoie":null,"hibernateLazyInitializer":null}},"nomNormalized":null,"prenomNormalized":null,"nomMaritalNormalized":null}

I'll give you simple ones on several lines
link : https://jetzip.net/fr/transfert?p=cb7e1d...454d2522b5
Contact: 0589543c49ed5bc0cd7ccc7dcd95a039a268125e143ebc82ab48910c6571b20a48