Zéro Logement Vacant visé par une fuite massive ?

A hacker claims to have compromised Zéro Logement Vacant, a service of beta.gouv.fr, and extracted approximately 149 million lines of data, including information attributed to the DGFiP. The attack exploited a compromised Metabase administrator account and a PostgreSQL password stored in plain text. The hacker alleges the service was running with disabled encryption at rest and exposed sensitive data, including personal information, addresses, and identifiers. This incident highlights the risks associated with weak passwords and compromised administrative accounts within business intelligence tools.