Tunisian insurtech Avidea source code leaked on DarkForums

Overview

On 2 December 2025, a DarkForums user posted what they describe as a data breach at Avidea, a Tunisian company providing digitalised motor claims processing solutions for insurers. The post says Avidea experienced a breach in November 2025 and that its source code was stolen.

What was published

The release consists of the platform's source code, with a file tree sample included in the thread and a download made available. No customer records are claimed in the post; the compromised data is the application's codebase.

Risks for affected individuals

• Source code exposure can reveal vulnerabilities in the claims platform used by insurers.
• Hardcoded secrets or credentials in the code would amplify the impact of the leak.

What remains unknown

• Whether customer or claims data was also taken despite not being mentioned.
• The size of the codebase and the repositories included.
• Whether Avidea has acknowledged the incident publicly.

What affected people should do

Insurers using the Avidea platform should review the exposed code for credentials and contact the company for a security assessment. Policyholders should remain alert to any suspicious communication about their claims.