2026 e-Benefits Prévoyance (LGI) — forum IDOR scrape claim; 6,420 users (unverified)
Data compromised
Actor-claimed 6,420 user rows with contract, employer, group, company-registration, and policy-related identifiers; sample allegedly tied to Saint-Gobain Weber France employee benefits contract—unverified
Technical writeup
Unverified criminal-forum claim — observed July 12, 2026. Dark Web Informer and DailyDarkWeb reported two forum actors claiming they extracted data from e-Benefits Prévoyance, a French employee health and prévoyance benefits platform operated by LGI, by exploiting an alleged IDOR vulnerability in the platform API. The posts cite approximately 6,420 user records including contract, employer, group, company-registration, and policy identifiers; a visible sample allegedly references a Saint-Gobain Weber France benefits contract. LGI and e-Benefits Prévoyance had not issued a matching public breach confirmation at indexing time. BreachHistory indexes the actor-cited 6,420 count labeled unverified.
Root cause
Unverified criminal-forum claim alleging IDOR in e-Benefits Prévoyance API allowed unauthorized record scraping—LGI had not confirmed at catalog time