2026 IAD Group — ChimeraZ/misere sale claim; ~3.8M people + 966GB docs (unverified)
Data compromised
Alleged client/adviser CRM records and large PDF document set (unverified)
Technical writeup
Unverified forum claim: on 2 July 2026, threat actors ChimeraZ and misere advertised a database attributed to IAD Group (parent of iad France, the country’s largest network of self-employed real-estate agents). CyberBreaches and Cyberattaque.org reported a claimed 14.3 GB JSON set with ~2.04M records relating to roughly 3.83 million people, plus a separate ~966 GB cache of ~398k PDF documents (clients, advisers, properties, contracts). Sellers framed it as part of a broader June 2026 French property-sector leak wave. IAD had not confirmed at indexing.
Root cause
Unverified cybercrime-forum sale listing (ChimeraZ / misere)