France
Automotive E-commerce
Customer & Transaction Data
Leak Claim
Unverified
Colorbox Data Leak Claim Lists 7.67 Million Rows With Customer, Shipping and Invoice Data
Overview
An actor using the handle "ChimeraZ" claims to have leaked a database associated with Colorbox, a French online store specializing in automotive paint and body-repair products for professional garages.
The post advertises 7,673,997 lines in approximately 2.2 GB of CSV data, including 87,787 phone numbers and 60,291 email addresses. The visible files appear to cover mailing-list records, parcels and shipping, invoices, business/customer management records, user accounts, and delivery-address information. The dataset, its source, the stated counts and current availability have not been independently verified.
Post details
FranceWhat the post claims
- 7,673,997 lines advertised
- 87,787 phone numbers
- 60,291 email addresses
- 2.2 GB total size
- CSV format
- 1M_mailing_liste.csv referenced
- 174K_colis.csv referenced
- 144K_facture.csv referenced
- 114K_manageo.csv referenced
- 16K_utilisateur.csv referenced
- 16K_utilisateur_livraison.csv referenced
- Mailing-list records included
- Parcel / shipping records included
- Invoice records included
- Customer and business-management records included
- User-account records included
- Delivery-address records included
- Multiple download mirrors provided
The visible samples contain customer names, addresses, phone numbers, email addresses, invoice values, shipping information and business-related records. Those individual values are not transcribed in this report.
Screenshots
IOCs & identifiers
Identifiers directly visible in the supplied material. These support correlation and do not independently verify the dataset claim.
| Type | Identifier | Source |
|---|---|---|
| Actor handle | ChimeraZ | Screenshots 1–2 |
| Telegram | @chimeradbs | Screenshot 2 |
| XMPP | chimeraz@xmpp.is | Screenshot 2 |
| Named organization domain | color-box[.]eu | Screenshots 1–2 |
The organization domain identifies the company named in the claim, not malicious infrastructure. Direct download mirrors and customer identifiers shown in the source material are intentionally not reproduced here.
Mapped techniques
Claimed identifies behavior explicitly described by the actor. Inferred identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified.
- Collection T1213.006 Data from Information Repositories: Databases Inferred The listing presents multiple structured CSV datasets containing customer, shipping, invoice, user and business-management information. The supplied material does not disclose how the data was obtained or independently establish unauthorized access to Colorbox systems.
Potential impact
If authentic, the claimed dataset could expose customer contact information, postal and delivery addresses, invoice data, shipping records and business-account information. The combination could support targeted phishing, impersonation, fraud, business-email compromise attempts or other customer-focused abuse.
Status Unverified
Dark Web Informer has not independently verified the dataset's authenticity, source, completeness, 7,673,997-line count, phone or email totals, sample contents or current availability. The supplied screenshots document the listing and visible samples, not independent confirmation of the underlying data.
