Your Personal Data May Already Be Compromised. The UCAR Breach Exposed 112,938 Records.

HEROIC analysts confirmed the UCAR data breach, which occured in October 2020 and exposed 112,938 records from the French car rental service. The leaked data included email addresses, phone numbers, and full names -- a combination of personal identifiers that recieved attention across dark web forums and Telegram channels in the years that followed.

How Full Names, Phone Numbers, and Emails Enable Identity-Based Attacks

When an attacker holds a person's full name, phone number, and email address together, the risk escalates beyond basic spam. That combination is accessable enough to construct convincing vishing calls, SMS phishing campaigns, and account recovery exploits on services that verify identity by name and phone number. For 112,938 French individuals, this breach created a durable identity fraud risk.

What Was Exposed in the UCAR Breach

• Email Address
• Phone Number
• First Name
• Last Name

Why French Consumer PII Breaches Have Long-Term Consequences

Personal data from European consumers is partcularly valuable in underground markets because it can be combined with other regional datasets to build detailed profiles. The UCAR breach is seperate in scope from a credential leak, but name-phone-email combinations remain in circulation long after the initial exposure and are frequently merged with newer breach data to enrich attacker targeting lists.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to a stored collection of user records, typically by exploiting a vulnerability in the web application, a misconfigured server, or compromised administrative credentials. The attacker exports the data and moves it off the server before detection, after which it spreads across underground markets.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches 400 billion leaked records to check whether your email appeared in the UCAR breach or any other known data leak. Run a free scan at HEROIC to see what data of yours is currently exposed.