Illegal Lookup Tools Expose Stolen Personal Data on Telegram and Discord

Illegal search engines known as lookups are currently sweeping across social messaging platforms. These tools allow cybercriminals to find personal phone numbers, home addresses, and bank details in seconds.

The rampant tools rely entirely on stolen records from major French public agencies and private companies. Meanwhile, judicial authorities in Paris are stepping up enforcement actions against the operators running these underground networks.

Rampant Proliferation of Illicit Search Engines

Underground developers are launching specialized search platforms that simplify access to stolen personal information. Users can enter a simple name or online handle to retrieve confidential identity details instantly.

These services pool together compromised records from massive cyberattacks targeting telecommunications firms, public employment services, social security funds, national education systems, and tax administration offices. Consequently, sensitive personal records that were previously scattered across hidden hacker forums are now fully searchable through automated software.

Furthermore, operators host these illegal tools directly on popular social platforms like Telegram and Discord. Young administrators often create these services to gain online notoriety or earn quick financial rewards. By charging subscription fees or per-search costs, creators monetize private individual information at scale.

Telegram also plays a role in cybercrime. In February 2026, a dataset allegedly exposing over 200 million Telegram accounts was reportedly sold online. The data may include usernames, emails, phone numbers, and partial passwords, potentially enabling phishing and account takeovers. Therefore, access to compromised personal records has become remarkably cheap and widely available to everyday internet users.

The dangerous ease of using these search portals presents unprecedented privacy challenges for victims. Individuals often remain entirely unaware that their personal contact details and banking information are visible inside these databases. Moreover, the centralized nature of these lookups eliminates technical barriers that previously protected stolen data from low-level threat actors.

Key features of this underground lookup network include:

• Broad data access covering phone numbers, home addresses, and private banking details stolen from major institutions.
• Widespread distribution across easily accessible communication channels on Telegram and Discord.
• Youth-driven operations managed by young administrators seeking financial gain or social clout.
• Severe legal penalties reaching up to ten years of imprisonment and one million euros in fines for operators.

Severe Exploitation Threats and Cybercrime Risks

The widespread availability of lookup tools directly fuels various dangerous online crimes. For example, malicious people utilize these types of engines to obtain information about victims.

With such information like home addresses and private numbers, these criminals make online harassment known as doxing campaigns against their targets. Moreover, professional criminals can use the search engines to obtain information such as banking accounts that they later use to perform various phishing attacks.

In addition, identity thieves use information that they collected to open new accounts and make illegal acquisitions and loans. Armed with official registration details from public agencies, scammers convincingly impersonate real victims before financial institutions. Consequently, unsuspecting individuals face sudden financial liabilities and damaged credit profiles due to automated identity fraud.

The key criminal threats arising from these lookup services include:

• Doxxing incidents, which can divulge whereabouts and contact details for vicious online harassment.
• Victimized phishing schemes, which can use stolen bank information to deceive people into giving away sensitive information.
• Identity theft schemes, through which impostors can take out loans and create fraudulent accounts in the name of the victims.

Cybersecurity researchers warn that the integration of stolen telecom data creates severe physical security threats. Threat actors can cross-reference phone numbers with real-time geographic data to track victim movements. In addition, harassing callers use these lookup results to target victim families directly. These compounding risks demonstrate how digital data leaks spill over into real-world harm.

Besides individual targeting, organized criminal groups employ lookups to conduct corporate reconnaissance. Attackers use illicit search tools to identify home addresses of prominent corporate visitors and devise customized extortion schemes. Hence, the widespread abuse of such a search method has implications for both personal privacy and corporate security.

Active Judicial Investigations and Stiff Penalties

The French judicial system is taking immediate legal action to shut down such criminal lookup services. In Paris, an investigation has begun to probe into the developers and website administrators who are connected to these services.

Police are following the money trails in terms of payments made over the internet, usernames of website operators, and the related server networks. Meanwhile, investigators are cooperating with foreign agencies to reveal the people behind the websites in other countries.

Operators running these illegal search services face severe legal consequences under national criminal codes. Such individuals can expect to serve up to 10 years in jail in case, once convicted in accordance with legal due process.

Furthermore, in accordance with similar regulations, operating over the search services can lead to penalties of up to one million euros. These harsh punishments reflect the severe societal damages from commercializing stolen personal data.

On the other hand, regulatory authorities are putting pressure on some platforms, such as Telegram and Discord, to enforce regulations and remove illegal channels as quickly as possible. The law enforcement agencies demand that technology companies should create stricter content monitoring systems to detect automated lookup bots. However, cybercriminals frequently create alternative channels immediately after platform moderators ban existing accounts.

Finally, the specialists in public health and security are recommending that people monitor their accounts regularly and track any suspicious activity. Also, cybersecurity experts advise changing default passwords and switching on two-factor authentication, and reporting unauthorized data publication to law enforcement agencies. Regulating these underground lookup search engines remains a critical priority for cybersecurity forces worldwide.