Ledil Immobilier: 6,700 profiles exposed after a data leak

On 21 April 2026, Ledil Immobilier — a French network of independent real estate agents covering houses, apartments, land and property investments nationwide — was named as the victim of a data leak after a database extracted from its systems was published on a cybercriminal forum.

Rather than a classic ransomware deployment, the database was made directly available for download, suggesting the data had already been exfiltrated and was being circulated openly. The forum post claimed the extraction was made easier by the absence of multi-factor authentication and of protections against automated scraping.

The leaked database covers roughly 6,700 unique profiles and appears to be a structured real estate CRM export. Reported exposed data includes:

• Names and first names of agents and clients (buyers and sellers)
• Contact details (emails, phone numbers)
• Internal agent records and user-account identifiers
• Property file references, including statuses, comments and specifications (price, size, number of rooms, location)
• Transaction-related data such as notary information, invoice numbers, fees and creation/modification timestamps

The combination of personal, property and financial data raises a heightened risk of targeted fraud, identity theft and phishing campaigns impersonating agencies or notaries. As of reporting, no official statement from Ledil Immobilier had confirmed the full authenticity or scope of the leaked database, and the status of the incident remains unconfirmed.