France
Retail & E-commerce
Customer Data
For Sale
Unverified
FitnessBoutique Customer Dataset Offered for Sale With 1.96 Million Records
Overview
An actor using the handle "Syrv4x" claims to be selling a FitnessBoutique dataset. The listing describes FitnessBoutique as a French company operating a European retail and e-commerce business focused on home fitness equipment and sports nutrition.
The post advertises 1,960,466 records totaling 3.5 GB. It claims the material contains customer names, email addresses, phone numbers, postal addresses, GUIDs and customer IDs, along with additional account, subscription and loyalty-related fields. The seller lists a price of $750, negotiable, and provides a 1,500-line sample. The dataset, its source, the stated counts and the seller's possession of the full material have not been independently verified.
Post details
FranceWhat the post claims
- 1,960,466 records advertised
- 3.5 GB dataset advertised
- 1,960,456 email values
- 1,809,656 unique email addresses
- 1,959,708 last-name values
- 350,543 unique last names
- 1,946,033 first-name values
- 61,509 unique first names
- 1,586,628 phone-number values
- 1,272,249 unique phone numbers
- 1,966,361 address values
- 986,781 unique addresses
- 1,960,465 GUID values
- 1,841,628 unique GUIDs
- 1,944,081 customer ID values
- 1,668,600 unique customer IDs
- 1,500-line sample advertised
- $750 asking price, negotiable
The visible field list also references account balances, multiple address objects, customer GUIDs, customer numbers, email fields, subscription data, loyalty-related fields, VAT numbers, vouchers, shop identifiers and other customer-account metadata. The displayed sample is not reproduced here because it contains personal information.
Screenshots
IOCs & contact identifiers
Identifiers directly visible in the listing. These support correlation and do not independently verify the dataset claim.
| Type | Identifier | Source |
|---|---|---|
| Actor handle | Syrv4x | Screenshot 1 |
| Telegram | @Syrv4x | Screenshot 1 |
| Named organization domain | fitnessboutique[.]fr | Screenshot 1 |
The domain identifies the organization named in the claim, not malicious infrastructure. No Tox ID, Session ID, malware hash or attacker-controlled IP address is visible. Customer identifiers shown in the purported evidence are not included in this table. URLs to any data will always be blurred out, but are available for subscribers on the threat feed or ransomware feed.
Mapped techniques
Claimed identifies behavior explicitly described by the actor. Inferred identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified.
- Collection T1213.006 Data from Information Repositories: Databases Inferred The listing describes a structured customer dataset containing account, contact, address, subscription and loyalty-related fields. The supplied material does not reveal how the data was obtained or establish unauthorized access to FitnessBoutique systems.
Potential impact
If authentic, the claimed dataset could expose names, email addresses, phone numbers, postal addresses and customer identifiers at significant scale. The additional account, subscription and loyalty-related fields could provide context for targeted phishing, impersonation, credential-harvesting attempts and other customer-focused social engineering.
Status Unverified
Dark Web Informer has not independently verified the dataset's authenticity, source, 3.5 GB size, 1,960,466-record count, current availability or the personal-data totals stated by the seller. The supplied material shows the listing and a sample rather than the full dataset.
