Thales: thousands of employee records released publicly on a cybercriminal forum
On 12 May 2026, a threat actor known as ChimeraZ published an 85 MB JSON file with roughly 6,400 user profiles tied to French defence group Thales; the data originated from LuxTrust, an outsourced e-signature provider, and exposed names, emails, phone numbers, organisations and account roles.
- Victim
- Thales
- Records
- 6.4K