Threat watch / Breach
Auto-Planning: hack of a booking provider for French vehicle inspection centres
Auto-Planning, which runs online booking and SMS reminders for French vehicle inspection centres, confirmed it was hacked after its home page was replaced by a ransom demand on October 28. The attacker claims hundreds of millions of booking records with names, phone numbers, emails and number plates, and put a database up for sale on November 7. The company has not confirmed the volumes.
- Sector
- Transport
- Way in
- Not public yet
- Product or vendor
- Auto-Planning
- How it happened
- Not public yet Checked 9 Nov 2026
- What was stolen
- Not confirmed by the company. The attacker claims booking records (names, phone numbers, emails, number plates, vehicle make and model, appointment details, booking IP addresses), centre accounts, invoices, source code and access credentials. Fuites Infos says a published sample holds appointments with name, phone, email, plate and IP, centre accounts and hashed passwords; the invoices, bank details and source code remain unverified claims.[1][2][3] Checked 9 Nov 2026
- Who was impacted
- People who booked a vehicle inspection through centres that use Auto-Planning (more than 450 centres according to JeChange; the attacker's listing names 767). Claimed volumes range from about 2.3 million plates to 18 million identities and do not add up; FrenchBreaches warns none of them is confirmed.[2][5] Checked 9 Nov 2026
- Threat actor
- Not attributed. Claimed by a seller using the name ChimeraZ, according to L'argus and FrenchBreaches. No attribution by an authority or a researcher.
Timeline
- The Auto-Planning home page is replaced by a ransom demand. The claim asks for $33,333 within 72 hours, under the name "Operation GlassLodge". [1][2][3]
- JeChange reports that the stolen file is put up for sale. [5]
- Auto-Planning confirms to BFM Tech that it was hacked, without validating the volumes claimed. The CNIL has been notified, according to the same source. [1][3]
- A seller using the name ChimeraZ lists "242M lines" (34.6 GB) from Auto-Planning on a cybercriminal forum. Fuites Infos says the newest records date from the night of October 27 to 28. The company has not confirmed the new figures. [1][2]