2026 TimeTonic — 0xSec Metabase claim; >50k people / 67 Excel files (unverified)
Data compromised
Actor: >50k people across 67 XLSX files — names, emails, phones, addresses, job titles/grades, org affiliations; public-sector contacts cited (unverified)
Technical writeup
Unverified Metabase claim — Cyberattaque.org August 25, 2026. Actor 0xSec claimed extraction of three databases from multiple Metabase instances tied to French no-code platform TimeTonic, releasing 67 Excel files covering more than 50,000 people (professional contacts across energy, insurance, health, industry, and public bodies including ministries and large French orgs named as contacts — not as breached networks). Fields alleged include names, emails, phones, postal addresses, grades/roles, and case status. TimeTonic had not publicly confirmed at indexing. recordsAffected 50000 = actor people floor (unverified); companyConfirmed false.
Root cause
Unverified 0xSec claim of three databases from multiple TimeTonic Metabase instances (Aug 25, 2026)