BlgCloud: vendor confirms an incident, disputes the claimed scale
BlgCloud, a software vendor used by dozens of companies including Bergerat Rent,
confirms a technical incident affecting 13 clients — a hacker claims
159 out of 230. Eleven successive releases of client-company data.
⚠️ Partially confirmed, scale disputed. BlgCloud
acknowledges a real technical scenario, but firmly disputes the number of affected clients
claimed by the hacker. This case file documents both what's confirmed and the gap with the
claim — not a leak at one company, but at a software vendor shared by dozens of SMEs.
The numbers, and their real status
13
Client instances affected, confirmed by BlgCloud itself.
Official BlgCloud response, cited by Cyberattaque.org.
159
Client instances claimed as compromised by the hacker, out of
roughly 230 total — a 12x gap with the confirmed figure.
Hacker's claim, not confirmed by BlgCloud.
12
Successive, numbered releases of different companies' data by the
same hacker, including Bergerat Rent (11th release) and DRON Location (12th
release).
FrenchBreaches, "BlgCloud Leak" series.
0
Banking, accounting or sensitive personnel data compromised,
according to BlgCloud.
Official BlgCloud response.
Timeline
CONFIRMED
2026
BlgCloud identifies a technical scenario that, under certain
conditions, allowed the creation of an extranet account with misconfigured rights —
the confirmed technical cause of the incident.
CLAIMED
Series of releases
A hacker publishes, in a numbered series, batches of data
presented as coming from successive BlgCloud clients: Cravero Motoculture, Groupe
Cloué, Groupe Lenormant, Le Bon Matériel, then Bergerat Rent (43GB, 132,433 files,
"11th release"), then DRON Location (44GB, 49,035 files, "12th release"), with CRM,
commercial and billing data.
CONFIRMED, BUT DISPUTED
BlgCloud's response
BlgCloud disputes the 159 claimed instances and identifies 13
client instances actually affected, stating that no banking, accounting, or sensitive
personnel data was compromised according to its investigation.
🧮A 12x gap between confirmed and claimed
This case file illustrates an extreme case of numerical disagreement between a
company and a hacker: 13 versus 159 client instances. Unlike other cases where the
company discloses no figure at all, BlgCloud puts forward an explicit competing figure —
which, for once, lets us precisely measure the scale of the disagreement instead of
guessing at a silence.
What it changes for you
If your company is a BlgCloud client, or if you're a customer or supplier of a company
using BlgCloud (Bergerat Rent and the others named above), your professional contact and
billing data could be in one of these releases. The main risk is invoice fraud or business
email compromise. See From Leak to Scam.
🔒 Always verify by phone call any change of bank details
received by email from a supplier or client, even if the message cites a real invoice or
order reference.
Frequently asked questions
Is the BlgCloud leak confirmed?
Partially: BlgCloud confirms the technical scenario and 13 affected instances, the
hacker claims 159.
What does Bergerat Rent have to do with this?
It's one of BlgCloud's clients whose data reportedly leaked, with no public
confirmation from the company itself on this specific leak.
What other companies are affected?
At least Cravero Motoculture, Groupe Cloué, Groupe Lenormant, Le Bon Matériel and DRON
Location.
📌 Last checked: August 21, 2026. Verifiable
information to report: contact@egidio.app.
Cite this pageEgidio — The Threat Laboratory, "BlgCloud: vendor confirms an incident, disputes the claimed scale," egidio.app/en/laboratoire/blgcloud-vendor-breach-disputed/. Licensed CC BY 4.0.
Free to reuse, including commercially, with attribution. Reuse terms.