Free.fr 43.5 GB Breach Data Now Publicly Leaked on Dark Web

Data Breach Overview
In October 2025, a dark web actor using the alias “BugsBunny” publicly leaked a 43.5 GB uncompressed dataset containing customer data from Free.fr, France’s second-largest ISP. This dataset was previously offered for sale in 2024 after a major security breach. However, this is the first time it has been made available for free, dramatically increasing the risk of widespread misuse.

Where Was the Data Found?
The data was shared openly on the dark web platform leakbase.la, known for distributing leaked databases. According to the post, the leaker criticized others for selling partial or fake versions of the dataset and released the “full real data” for free.

The dump reportedly includes:

• Email addresses, many using the @free.fr domain
• Customer identifiers and service data
• Banking details, including IBANs (as confirmed in the original 2024 breach)

Company Data Breach History
This dataset originates from a confirmed breach in October 2024, when Free reported that attackers had accessed a management tool and extracted data affecting more than 19 million users, including over 5.1 million IBANs. At the time, the company stated that no passwords, payment card data, or communication content were exposed.

While the breach was previously acknowledged, the data was only circulated privately or sold—until now.

Impact and Risks
Now that the data is publicly available, the exposure risk increases significantly:

• Phishing and social engineering campaigns using real user data
• Identity theft and bank fraud via exposed IBANs
• Credential reuse attacks if email-password pairs are involved
• Damage to customer privacy and potential regulatory consequences

Recommendations for Users
If you are a Free.fr customer (past or present):

• Immediately change your password (especially if reused on other platforms)
• Enable Two-Factor Authentication (2FA) on all major accounts
• Monitor your bank accounts for suspicious transactions
• Watch out for targeted phishing emails or SMS mentioning your Free account
• Consider using identity theft protection or monitoring services

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.