2026 Zenfirst — user/lead/invoice dataset claim (unverified)
Data compromised
Actor claim (unverified): names, emails, phones, company names/IDs, Stripe user/subscription IDs, plans, SIRET, promo codes, invoice filenames/URLs, OCR/extracted invoice text, taxes, currency, due dates, totals, invoice numbers/status — largest file invoices.jsonl ~84,619 KB; no attested row count
Technical writeup
Unverified leak-site / forum claim — Dark Web Informer September 17, 2026. Actor Alduin posted alleged Zenfirst (French freelancer/SMB invoicing SaaS) JSONL dumps for users, leads, and invoices with Stripe/SIRET fields and large invoice corpus (~84.6 MB). Download gated behind forum reply. No row census published; company confirmation not located at indexing. recordsAffected 0 (no cited count); companyConfirmed false.
Root cause
Unverified forum dump (actor Alduin) claiming Zenfirst users.jsonl / leads.jsonl / invoices.jsonl