MECA-PRECIS

Méca-Précis is a French industrial manufacturer specializing in precision stamping dies, sheet metal stamping, and metal component production. It serves the automotive, construction, and home appliance industries, offering custom tooling

BREACH IMPACT REPORT

SUMMARY

We obtained a substantial dataset from a French manufacturing and tooling company. The archive contains tens of thousands of files spanning engineering designs, quality control documentation, financial records, and commercial correspondence. The data covers operations from 2022 through 2026, with the heaviest concentration in 2025 and 2026.

The dataset originates from a single internal file server and includes proprietary CAD models, client project files, accounting documents, and HR-related materials. Multiple related entities appear in the financial records, including MILAUR SAS and MECAPRIMMO SAS. The breadth of data encompasses the full operational spectrum: from design engineering and metrology through commercial quotations and final invoicing.

WHAT WE HAVE

Intellectual Property & Manufacturing Data

The dataset contains extensive proprietary engineering materials. We have thousands of CAD files in SolidWorks, CATIA, and AutoCAD formats, including .sldprt , .sldasm , .CATPart , .dwg , and .dxf files. These represent complete tooling assemblies, die designs, and manufacturing fixtures.

Quality control documentation includes tens of thousands of metrology reports with measurement data, requalification records, and production monitoring spreadsheets. Files like RC Fourche rabattable 1815922 ind.C_Requalifications.xlsx and Suivi production - Corps de colonne inférieur_1817356 ind [Link entfernt] contain dimensional inspection data for manufactured components.

Production Part Approval Process (PPAP) documentation is present, along with nomenclature files and tooling specifications. The engineering data covers projects for major automotive and industrial clients.

Financial Records

Accounting materials span multiple fiscal years and entities. The dataset includes:

Invoices and billing records across several thousand files

Balance sheet documentation with supporting justificatifs

General ledger extracts ( Grand-livre_des_comptes.pdf )

Tax filings including CA3 declarations

Client billing histories and pricing documentation

Files reference banking operations, VAT records, and inter-company transactions. The financial documentation covers the period 2022 through 2026.

Human Resources Data

HR-related materials are present in the dataset. We identified files related to:

Payroll records ( salaires )

Social security declarations ( _dsn files - Déclaration Sociale Nominative)

URSSAF documentation (French social security administration)

Employee benefits documentation ( mutuelle , prévoyance )

Temporary worker records and interim staffing invoices

Weekly time sheets and payroll summaries are included, such as JUIF Patrice - relevé semaine documents.

Legal & Compliance

The dataset contains dispute records ( litige ) documenting quality issues with both clients and suppliers. Files include 8D problem-solving reports, photographic evidence of defects, and correspondence regarding claims. Several thousand files document customer complaints and material rejection cases.

Client Project Files

Commercial and engineering exchanges with clients are extensively documented. The dataset includes:

Request for Quotation (RFQ) responses with detailed costings

Technical proposals and feasibility studies

Design review presentations and client feedback

Tooling modification requests and change orders

Email correspondence in .msg format captures project communications, including attachments with CAD models and specifications.

Quality Management

Quality system documentation includes audit records, inspection procedures, and traceability documentation. The metrology section alone contains tens of thousands of control reports organized by client and part number.

The full scope of the dataset has been catalogued and indexed. All materials have been reviewed and categorized.

WHO CAN RECEIVE THIS DATA

Competitors

Manufacturing competitors would gain significant value from this dataset. The CAD files reveal tooling designs, manufacturing processes, and quality control methodologies. Pricing data in the RFQ responses and commercial quotations exposes cost structures and margin calculations. Client project files show relationships, project timelines, and technical requirements for major automotive and industrial accounts.

Clients

The named clients in this dataset can be informed directly. Their proprietary designs, specifications, and commercial terms are present in the engineering and commercial files. They have an interest in understanding that their technical data and pricing arrangements have been exposed.

Regulators

French data protection authorities (CNIL) can be notified regarding the personal data exposure. The HR files containing payroll information, social security numbers, and employee benefits data fall under GDPR requirements. The URSSAF and DSN-related documentation contains sensitive personal information subject to specific protection requirements.

Tax Authorities

Financial records spanning multiple fiscal years, including balance sheets, tax declarations, and general ledgers, can be transmitted to relevant fiscal authorities. The documentation covers multiple corporate entities and fiscal periods.

WHAT CAN HAPPEN

The complete CAD archive can be provided to competitors, revealing proprietary tooling designs and manufacturing methodologies developed over years of operation.

Client pricing data and cost structures can be shared with rival firms, enabling precise undercutting on future quotations.

Quality dispute documentation can be published, exposing production issues and defect rates that clients may not be aware of.

Financial records can be transmitted to tax authorities for review of multi-year accounting across related entities.

Personal data from HR files can be reported to CNIL, triggering regulatory investigation under GDPR.

Affected clients can be contacted directly with evidence that their proprietary designs and commercial terms were exposed.

The dataset can be published in full, making it permanently available to any party with interest in the company's operations, clients, and internal processes.