Alleged Data Breach of MediaMarkt Switzerland Exposing 3.7 Million Customer Records
🧩 Standalone API Access Now Available
Access high-volume threat-intelligence data, automated ingestion endpoints, ransomware feeds, IOC data, and more – independently from the above standard subscriptions.
View API AccessUnlock Exclusive Cyber Threat Intelligence
Powered by DarkWebInformer.com
Foundational access to breach intelligence. Track breaches, leaks, and threats in real time with high quality screenshots and concise expert summaries.
Continuously updated breach reports and threat summaries.
Daily breach, leak, and DDoS alerts.
Live tracking with JSON export.
Direct access to claims and posts.
Concise summaries of DDoS, defacements, and breaches.
Verified index of dark web sites and services.
Live status of 500+ sites.
Integrated checks inside breach posts.
Uncompressed, watermark free evidence.
Browser alerts for tracked terms.
Quick Facts
Incident Overview
A threat actor using the handle "daghetiaw" claims to be selling a database from MediaMarkt Switzerland. The threat actor states it is a well-known website in Switzerland that has been available since 2002, selling electronic and household products. There are over 3.7 million individuals in the database.
- Database Origin: MediaMarkt Switzerland (mediamarkt.ch)
- Since: 2002
- Total Records: Over 3.7 million individuals
- Full Names: First and last names (surnames)
- Email Addresses: Customer email addresses
- Phone Numbers: Customer contact numbers
- Ordered Articles: Products purchased by customers
- Customer IDs: Unique customer identification numbers
- Tracking Numbers: Shipment tracking information
- Purchase Dates: Dates of purchase transactions
- Product Categories: Categories of purchased items
- Dates of Birth: Customer birth dates
- Loyalty Coupons: Loyalty program and coupon information
- Article Ratings: Customer product ratings and reviews
- Language Spoken: Customer language preferences
- Sample Data: Includes detailed JSON formatted customer records with purchase history, personal information, and transaction details
- Contact: Session messenger
Indicators of Compromise (IOCs)
Session Messenger ID
05c7bb3a79e5ed414f39bc736a8809f55215d3c4ada092f13742107a78fcec3f1c
Note: This Session ID can be used to identify the threat actor's communication channel.
Breach Claim URL
Image Preview
Unlock Exclusive Cyber Threat Intelligence
Powered by DarkWebInformer.com
Foundational access to breach intelligence. Track breaches, leaks, and threats in real time with high quality screenshots and concise expert summaries.
Continuously updated breach reports and threat summaries.
Daily breach, leak, and DDoS alerts.
Live tracking with JSON export.
Direct access to claims and posts.
Concise summaries of DDoS, defacements, and breaches.
Verified index of dark web sites and services.
Live status of 500+ sites.
Integrated checks inside breach posts.
Uncompressed, watermark free evidence.
Browser alerts for tracked terms.
Dark Web Informer © 2026 | Cyber Threat Intelligence
