[pwn2dd]

https://bf.st/attachments/2646/

---

Atout France, together with a collective of French and international tourism stakeholders,
is developing tourism experiences for travelers today and tomorrow.

---

[HEADING=3]

target :https://www.atout-france.fr/

[/HEADING]
[HEADING=3]

vulnerability : #LunarisSec as discovered a critical IDOR vulnerability affecting over 400k accounts and modifying accounts. We have compromised over 400k users.

[/HEADING]

---

[HEADING=3]

Message: We have compromised and modified several of your admin accounts. The total compromised data is 400,000 users.

[/HEADING]
[HEADING=3]

The compromised data includes: profile_id, drupal_user_id, email, organisation, member_number, profile, SIRET number, last name, first name, function, login, phone, billing_address, billing_addition, billing_postal_code, billing_city, billing_country, delivery_address, delivery_addition, delivery_postal_code, delivery_city, delivery_country, and URL_edit.

[/HEADING]
[HEADING=3]

It's stupid to leave such a big vulnerability.

[/HEADING]
[HEADING=3]

All users were scraped without a single person realizing it.

[/HEADING]
[HEADING=3]

Breach By CybΞr , Morphyn , Pwn2dd

[/HEADING]

---

[HEADING=3]

https://pastebin.com/GnhCaftg

[/HEADING]

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Selling in Games section. If you feel this is incorrect: http://breached4wtyw5fb45zj7sggnoazgv3aohme2zftkrndhvo76d5q5uad.onion/Forum-Ban-Appeals

[danielgouss]

Hello, where is the download link ? thank you

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Spam

[suicided]

The link in this thread is dead. Thread has been moved to the Databases Removed Content section.