21-05-25, 04:09 PM
Code:
DB: villelec_elus.loginmdp
- Plaintext passwords for elected officials
- Username: ced / mdp: b3u3DuWnYm
- Activity logs, visit timestamps
DB: villelec_agents.loginmdp
- 7 agent accounts (plaintext again)
- Includes system roles like majct / majcos
- Example: paulineflt → mdp: Dg35&u5an
DB: extranet_login
- Hashed (bcrypt) access for main info portal
- Username: infocom@lecheylas.fr
- Likely tied to Cédric Constantin
DB: villelec_mairie.bib_mdp
- Admin and school-related accounts
- Some hashes, some obvious reused credentials
- admin_ced = Cédric Constantin again
Multiple systems linked to a small French municipality ("Le Cheylas") have been popped. Poor password practices, multiple reused accounts, plaintext credentials, and exposed login endpoints.