Incident Overview

A threat actor going by HexDex claims to be selling customer data from Allopneus, one of France's leading online tire retailers. The company specializes in tire sales across a wide range of brands and offers vehicle maintenance services with nationwide delivery. This is HexDex's third French breach listing in recent days, following Therapeutes and Airsoft-Entrepot.

The actor states the dataset covers 12 years of customer data from 2014 to 2026, with the following breakdown:

• Unique Customers: 453,299 individual customer profiles.
• Total Records: 739,316 records across the dataset, indicating multiple entries per customer (likely repeat purchases or service records).
• Unique Phone Numbers: 513,089 phone numbers, which exceeds the customer count, suggesting some records include multiple contact numbers per customer.
• Unique Emails: 453,299 email addresses matching the unique customer count.

The actor provided proof links, sample lines, and a 1K line sample to demonstrate authenticity. Pricing is by offer with contact via qTox or Session. Given the nature of the business, the customer data likely includes physical addresses (for tire delivery and service appointments), vehicle information, and purchase histories in addition to the confirmed contact data. The 12-year data span is substantial and covers the period during which Allopneus grew into one of France's dominant online automotive retailers.