Threat actor 'Alduin' offers ~151,000 Climb Up customer records from 29 French climbing gyms for sale
A threat actor using the handle Alduin claims to be selling a customer dataset from Climb Up, described as the largest network of indoor climbing gyms in France. The listing advertises approximately 151,000 records covering customers across 29 locations, with data spanning January 2016 to March 2026. The seller asks for offers in XMR only, says only two buyers will be accepted, and advertises a 1,000-record sample. The dataset, its source, the record count and its current availability have not been independently verified, and the article does not say how the data was obtained or whether Climb Up systems were accessed without authorization.
Technical Details
- The file is described as JSONL, about 93,530 KB.
- Visible schema fields: customer IDs, names, dates of birth, age, postal addresses, phone numbers, email addresses, associated structures, online-account identifiers and relationships, family or relation types, card information, creation and update timestamps, last-activity data, and a created-via-online flag.
- The article gives no Tox ID, Telegram handle, malware hash or attacker-controlled IP address. Sample-download mirrors appear in the listing screenshot but are deliberately not reproduced.
- The only ATT&CK mapping is T1213.006 (Data from Information Repositories: Databases), which the source labels as inferred, not confirmed.
- If authentic, the combination of names, dates of birth, addresses, phone numbers and emails could support targeted phishing, impersonation and identity fraud.
Remediation
The article offers no remediation guidance. Climb Up should validate the claim and assess any exposure. Customers should be alert to phishing and impersonation attempts that use their contact details.
Linha do tempo
-
Threat actor 'Alduin' offers ~151,000 Climb Up customer records from 29 French climbing gyms for sale
ler a análise desta fonte ocultar
A threat actor using the handle Alduin claims to be selling a customer dataset from Climb Up, described as the largest network of indoor climbing gyms in France. The listing advertises approximately 151,000 records covering customers across 29 locations, with data spanning January 2016 to March 2026. The seller asks for offers in XMR only, says only two buyers will be accepted, and advertises a 1,000-record sample. The dataset, its source, the record count and its current availability have not been independently verified, and the article does not say how the data was obtained or whether Climb Up systems were accessed without authorization.
Technical Details
- The file is described as JSONL, about 93,530 KB.
- Visible schema fields: customer IDs, names, dates of birth, age, postal addresses, phone numbers, email addresses, associated structures, online-account identifiers and relationships, family or relation types, card information, creation and update timestamps, last-activity data, and a created-via-online flag.
- The article gives no Tox ID, Telegram handle, malware hash or attacker-controlled IP address. Sample-download mirrors appear in the listing screenshot but are deliberately not reproduced.
- The only ATT&CK mapping is T1213.006 (Data from Information Repositories: Databases), which the source labels as inferred, not confirmed.
- If authentic, the combination of names, dates of birth, addresses, phone numbers and emails could support targeted phishing, impersonation and identity fraud.
Remediation
The article offers no remediation guidance. Climb Up should validate the claim and assess any exposure. Customers should be alert to phishing and impersonation attempts that use their contact details.