pagesjaunes.fr Domain Breach Exposure Report

The telemetry indicates a significant exposure event affecting pagesjaunes.fr, with a total of 37,489 events recorded over the period from July 2025 to June 2026. The majority of these events, 32,572 (86.9%), are classified as historical data breaches, while 4,917 (13.1%) are active infostealer logs. A substantial number of client accounts, 35,227, and 2,262 employee accounts appear to be compromised. The data breaches are predominantly linked to "Combolist sources" (96.8%), suggesting credential stuffing attacks, and the active infostealer logs are associated with malware families such as LummaC2, Redline, Acreed, and Rhadamanthys. The primary targeted service is pagesjaunes.fr and its subdomains, with a notable concentration of activity originating from France. Given the high volume of historical data breaches and active infostealer logs, coupled with the compromise of both client and employee accounts, this incident presents a critical risk. The prevalence of credential stuffing attacks and the use of common infostealer malware necessitate immediate attention to credential hygiene and account security. Remediation efforts should focus on enforcing multi-factor authentication, resetting compromised credentials, monitoring for unauthorized access, and enhancing defenses against credential stuffing and malware infections across the pagesjaunes.fr infrastructure.