2026 Axess — X-VDP-X/diable’fire claim; 67 DBs / ~18.9k accounts (unverified)
Data compromised
Actor-claimed: emails/logins, cleartext passwords (alleged), names/addresses/phones/DOB, SIRET, IBAN/BIC, quotes/invoices across ~67 databases (unverified)
Technical writeup
Unverified leak-site claim: on August 23, 2026 Cyberattaque.org reported X-VDP-X / diable’fire claimed exfiltration of 67 databases (~7,841 tables, ~1.1GB) from French digital-services group Axess, including ~18,875 user accounts plus personal, bank, and commercial data. Axess had not confirmed at indexing. recordsAffected 18875 (actor accounts); companyConfirmed false.
Root cause
Unverified X-VDP-X / diable’fire extortion listing (observed Aug 23, 2026)