Incident Overview

A threat actor going by HexDex claims to be selling multiple databases from Airsoft-Entrepot, a French online retailer specializing in airsoft equipment, replicas, gear, and accessories. The company is known for competitive pricing, fast shipping, and a strong presence in the airsoft community. The listing covers data spanning from 2013 to 2026 across more than 10 separate database files.

The actor is offering customer, order, invoice, supplier, delivery, accounting, and B2B order databases along with warehouse and inventory data. From the customer file alone, the actor provided the following breakdown:

• Unique Addresses: 333K full address records.
• Unique Customers: 383K individual customer profiles.
• Unique Phone Numbers: 243K phone numbers.
• Unique Emails: 328K email addresses.

The breadth of the data goes well beyond just customer PII. The inclusion of supplier databases, B2B order records, accounting data, and warehouse inventory means this breach exposes the company's full operational backend: who they buy from, what they sell, what they stock, their financial records, and their entire customer and delivery history over 13 years. The actor provided proof links, sample data from the customer file, and a 1K line sample across all files. Pricing is by offer, with contact available via qTox or Session messaging.