Incident Overview

A threat actor using the handle Niphra claims to have breached Remington.bg, which they describe as the largest furniture retailer in Bulgaria, in early 2026. The listing includes two datasets: over 140,000 order rows and over 130,000 customer rows. The order data contains names, phone numbers, email addresses, physical addresses with city details, order status, completion timestamps, delivery notes, and pricing information in Bulgarian. The customer data includes names, email addresses, phone numbers, contact metadata, and account timestamps. Sample rows are provided for both tables. The asking price is $1,500 USD with payment accepted via MM/Escrow.