A hacker claims to have recovered 11,000 AMF files: What we know
An actor named “ChimeraZ” claims to have distributed data linked to the Financial Markets Authority, but the origin of the information remains uncertain.
Quick Look
- An Internet user under the pseudonym “ChimeraZ” claims the distribution of 11,173 recordings linked to the AMF.
- The data mainly concerns funds and management companies, possibly from the GECO public database, without proof of intrusion.
AI-generated summary
Why It Matters
The GECO database is a public AMF tool allowing you to consult information on collective investment products and management companies.
A claimed base, an unproven hack. An Internet user claims to have broadcast more than 11,000 recordings associated with the Financial Markets Authority. According to FrenchBreaches, one of the specialists in this type of business who reports this publication today, the sample mainly contains information on funds and management companies. As part of this data is normally public, their dissemination does not prove an intrusion into the regulator's systems.
Key Points
An actor named “ChimeraZ” claims the publication of 11,173 records related to the AMF domain.
The sample mainly describes financial products, their managers and their approvals.
The visible information could come, at least in part, from the GECO public database.
No element presented demonstrates exposure of the accounts or personal investments of savers.
AMF: More than 11,000 files claimed on a forum
According to FrenchBreaches, the post appears on a forum under the title “[FR] 11K AMF-FRANCE.ORG”. Its author, who uses the pseudonym ChimeraZ, announces a file of approximately 49 MB, containing 11,173 records in a structured computer format.
These figures remain those of the claim. They do not necessarily correspond to as many people, companies or separate funds: several lines can describe different components of the same product or the same organization.
The extract presented relates in particular to the FORTITUDE fund, its management company SOGELYM DIXENCE INVESTMENT MANAGEMENT and the depositary CACEIS Bank. It includes names, regulatory references, head office addresses, entity identifiers and update dates.
On the other hand, FrenchBreaches does not identify any passwords, personal banking details, or balances or transactions of individual investors in this sample. The presence of the name of a fund therefore does not mean that the information of its subscribers appears in the file.
The exact provenance and full contents of the database remain to be determined. The elements presented are not sufficient to confirm access to a confidential internal AMF system. But there is doubt.
The GECO public database constitutes a possible explanation
A technical field containing the words “displayGeco” particularly attracts attention. GECO is the AMF consultation base dedicated in particular to collective investment products and management companies.
Its public interface already displays names, approval numbers, addresses and professional contact details. It also offers an export function for management companies. The official guide describes access to authorized activities and managed products.
The hypothesis of an automated collection of public information is therefore plausible. However, it does not establish that each field of the claimed file was freely accessible. A detailed comparison remains necessary to identify possible non-public information.
Open Questions
- Does the database contain non-public information?
- What is the real origin of the data?
