40K+ Eiffage Employee Emails Leaked in May 2025 Incident

Leak Summary

In May 2025, hacker @idrc, with assistance from @flirt, published a dump containing over 40,000 Eiffage S.A. employee and corporate partner emails and full names on darkforums.st. Affected entities include:

• Eiffage S.A. (France)
• Subsidiaries: Clemessy, Eiffage Énergie Systèmes, Goyer Group

Eiffage is a prominent French civil engineering and construction firm—ranked 3rd in France and 5th in Europe in 2010. The leak occurred via their File Transfer Service, exposing sensitive contact information that could be exploited for phishing and identity theft.

---

Where & How?

The data dump appeared on darkforums.st, posted under the pseudonym @idrc, with files released by @flirt. It includes corporate emails and full names—information that could easily be weaponized in targeted phishing or social engineering campaigns.

Company Breach History

A search into past public incidents found:

• March 4, 2021 – Eiffage Poland
  A breach affecting recruitment, employee, and contractor data occurred. Authorities were notified, and access was lost, but no employee emails or names were publicly leaked

---

• What Individuals Should Do:

  • Change corporate passwords immediately
  • Enable multi‑factor authentication
  • Be vigilant for phishing attempts
  • Report any suspicious activity to IT/security teams

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.