-
A cybercriminal claims to have obtained 3 million phone numbers tied to France’s Bloctel anti-telemarketing service.
-
According to the post, the attacker gained access through a compromised business account that lacked multi-factor authentication.
-
The leaked data reportedly contains phone numbers and technical identifiers, while the full scope of the incident remains unclear.
A cybercriminal has claimed to have stolen a database containing 3 million phone numbers from Bloctel, France’s official service that lets people block unwanted telemarketing calls. According to the post, the entire database is available for free on a cybercrime forum instead of being sold, making it easier for others to copy and reuse.
According to the post, the data came from the service businesses use to check whether phone numbers are registered on Bloctel before starting telemarketing campaigns. The attacker claimed to have accessed the system after compromising a business user account that could consult the database.
The post also claimed the account did not use multi-factor authentication (MFA). According to the post, that allowed the attacker was able to log in and view phone numbers in plain text while searching the service. The exposed records reportedly include phone numbers and technical identifiers linked to each entry.
Bloctel is scheduled to stop operating on August 11, 2026, only a few days after the publication of the hacking claim. According to the available information, there is no evidence linking the reported incident to the planned closure of the service.
Compromised Business Account Reportedly Led to Database Access
Bloctel is the French government-backed service that allows people to register their phone numbers on a list that blocks unwanted marketing calls. Companies also use the platform to compare their contact lists against the registry before contacting potential customers.
According to the post, the attacker gained access through a compromised business account used for Bloctel’s professional consultation service. The account reportedly lacked MFA, allowing the attacker to access searches that displayed registered phone numbers in clear text.
According to the post, the stolen database contains about 3 million phone numbers together with technical identifiers linked to those records. Unlike many cybercrime posts that only publish a small sample, the actor reportedly made the entire database available for free download.
The claimed source of the compromised account remains unknown. According to the post, the login details may have come from an earlier breach or another type of account compromise. However, no information has been provided to confirm how those credentials were obtained.
At the time of writing, there is no independent confirmation of the full database, the exact number of unique phone numbers, or the complete technical details surrounding the reported access.
Leaked Data Could Help Fraudsters Build New Contact Lists
According to the post, the exposed information mainly consists of phone numbers and technical identifiers. No other categories of personal information were identified in the published material.
Even so, the reported leak could still create risks if the data spreads across other cybercrime communities. Phone numbers can be reused in unwanted telemarketing campaigns, fraudulent text messages, phishing attempts, and social engineering attacks. Criminals may also combine the numbers with information from other data leaks to create larger illegal contact databases.
The scale of these threats is staggering. A separate dark web listing recently claimed to expose a database of 550 million Chinese mobile phone numbers, available for $1,000 per search, demonstrating the massive black market for contact information.
The reported database has another important feature. According to the post, the listed phone numbers belong to people who specifically registered with Bloctel to avoid telemarketing calls. That makes the data different from ordinary contact lists because it reportedly identifies people who requested protection from unwanted marketing.
The post appeared only days before Bloctel is due to end its operations on August 11, 2026. While the timing has drawn attention, no information currently links the planned shutdown with the reported compromise.
Several Questions Still Remain Unanswered
According to the post, the leaked database contains approximately 3 million phone numbers and associated technical identifiers collected from Bloctel’s business consultation service. The attacker also claimed the records were obtained through a compromised professional account that was not protected by multi-factor authentication.
Several important details, however, remain unknown. The exact number of unique phone numbers has not been established. The origin of every record is also unclear, along with the period during which the information was allegedly collected. The source of the compromised account credentials has not been disclosed either.
For now, the available information comes entirely from the cybercrime forum post. No official confirmation has been released regarding the reported incident or its full scale.
