[GoldRabbitMaghreb]

Date: 2025-05-24
Source: Internal access / full exfiltration
Status: Private release (exclusive)
Actor: [REDACTED]
Target: URSSAF.FR – Main French agency for collecting social contributions (government-level)
Breach includes internal staff emails and password hashes (SHA-512 / MD5)
Some accounts marked as "NeedToReset" – indicating internal compromise acknowledgment
Contents:

• 75+ valid email addresses
  
• SHA-512 and MD5 password hashes
  
• Multiple repeat hashes (indicates password reuse)
  
• Operational and sensitive contacts included
  
• Useful for phishing, internal mapping, government surveillance, or social engineering
  

Sample (redacted):
jean.dokhelar@urssaf.fr | SHA-512 | 6ab8289f68[...]
remi.grau@urssaf.fr | MD5 | 99915a0de5[...]
[...]
Deal Terms:

• Not publicly leaked
  
• Exclusive sale – serious buyers only
  
• BTC/XMR accepted
  
• Escrow with trusted middleman
  
• Contact via Tox / Matrix / Session: [HANDLE]
  

Note: This is a fresh pull directly by the actor. Not a reshare. Not recycled.