What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Microsoft attributed the January 2023 Charlie Hebdo subscriber-database breach and influence campaign to an Iranian state-linked actor it calls NEPTUNIUM, which Microsoft says the U.S. Department of Justice has also identified as Emennet Pasargad. The group that claimed the breach used the online persona Holy Souls. In March 2026, the Council of the European Union sanctioned Emennet Pasargad and named Holy Souls as one of its aliases. The episode concerns a 2023 data breach and influence campaign, not the 2015 terrorist attack on Charlie Hebdo’s offices.
Who did Microsoft say was behind the breach?
In a report published February 2, 2023, Microsoft Threat Intelligence wrote: “Today, Microsoft’s Digital Threat Analysis Center (DTAC) is attributing a recent influence operation targeting the satirical French magazine Charlie Hebdo to an Iranian nation-state actor.” Microsoft called that actor NEPTUNIUM and said the U.S. Department of Justice also identifies it as Emennet Pasargad. The online persona claiming responsibility for the Charlie Hebdo operation was Holy Souls. Microsoft’s report is an intelligence attribution, not a court finding.
The Council of the European Union later formally listed Emennet Pasargad under the EU’s cyber sanctions regime. Its official listing names Holy Souls among the company’s aliases and describes the Charlie Hebdo subscriber-database compromise as one of the company’s activities. The Council’s listing also identifies other alleged activity, including a Swedish SMS service compromise, interference with advertising billboards in Paris during the Olympic Games, and attempted interference in the 2020 U.S. presidential election.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →What data was claimed stolen, and what was publicly released?
Microsoft reported that Holy Souls claimed in early January 2023 to have accessed a Charlie Hebdo database containing personal details for more than 200,000 customers. The group said the records belonged to people who had subscribed to or bought merchandise from the publication. Microsoft described a publicly released sample of 200 records containing names, telephone numbers, home addresses, and email addresses.
#1 Best Overall
Those figures refer to different things: more than 200,000 was the group’s claim about the full cache, while 200 was the sample Microsoft said had been released. Microsoft did not establish that the entire claimed dataset was publicly verified or leaked. It reported that Holy Souls advertised the purported full cache for 20 BTC, which Microsoft valued at roughly $340,000 at the time of its February 2023 report. That dollar conversion is historical, not a current valuation.
Why did Microsoft describe it as an influence operation?
The activity Microsoft described went beyond a claim of database access. Its account included a hacktivist persona claiming credit, social accounts promoting a defacement and the leaked data, dozens of French-language sockpuppet accounts amplifying the campaign, and accounts impersonating French authority figures by posting screenshots.
Microsoft said its attribution relied on a larger set of intelligence than the publicly visible indicators. It assessed the operation as a response to Charlie Hebdo’s cartoon contest about Iran’s Supreme Leader. That is Microsoft’s assessment of the motive; it is not a motive independently established by the operators’ public claims.
Free tools Windows power users keep installed
One-click scans. No signup required.
Why did the EU sanction Emennet Pasargad?
On March 16, 2026, the Council adopted restrictive measures against three entities and two individuals, including Emennet Pasargad. The Council’s announcement says the company unlawfully gained access to a French subscriber database and advertised its contents for sale on the dark web. Its formal listing specifically links the Holy Souls alias to the compromise and sale offer involving Charlie Hebdo’s subscriber database.
Under the regime, listed entities are subject to an asset freeze, and EU citizens and companies may not make funds, financial assets, or economic resources available to them. A travel ban applies to listed natural persons, not to Emennet Pasargad as an entity. After the March 2026 listings, the Council said the horizontal cyber sanctions regime covered 19 individuals and seven entities. The Council’s announcement gives the action’s date, scope, and consequences.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What remains unconfirmed?
The public material cited here does not establish whether anyone bought the purported full cache or whether the data is still available. Nor does Microsoft’s attribution mean that every detail in Holy Souls’ claims was independently verified. The confirmed public account is narrower: Microsoft described a 200-record sample and attributed the wider influence operation to NEPTUNIUM; the EU later listed Emennet Pasargad and tied its Holy Souls alias to the Charlie Hebdo database compromise.
Quick Recap
Best Value
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
