Skip to content

French Beauty Retailer Data Allegedly Up for Sale, With the Seller Crediting a Third Party Source

Breach Report France flagFrance Retail / Third Party Sourced Price By Offer

French Beauty Retailer Data Allegedly Up for Sale, With the Seller Crediting a Third Party Source

A forum user posting as misere is selling what they describe as the database of beautysuccess.fr, a French beauty and cosmetics retailer, listing 10,279,819 total records reducing to 5,169,727 unique. A 10,000 record sample has been published free on two file hosts. The post gives no field list, no schema and no record excerpt, so what the data actually contains is not established. The seller does state that the material came from a third party who supplied them with a large volume of company data, and points to another thread as the same source, which if accurate would mean the exposure is not limited to this one retailer. The claim is unverified.

Unique records5,169,727
Total records10.28M
Sample10K published
Actormisere

Post details

Targetbeautysuccess.fr
CountryFrance flagFrance
SectorBeauty and cosmetics retail
ListingSelling, price by offer
Volume5.17M unique of 10.28M
Stated sourceThird party supplier
Observed
Actormisere

!What the post claims

  • 10.28M total records
  • 5.17M unique records
  • Deduplication already applied
  • 10,000 record sample
  • Two public sample mirrors
  • Obtained from a third party
  • Same source as another thread
  • Third party held more data
  • No field list published
  • No schema shared
  • No record excerpt shown
  • Price by offer only

Screenshot

Potential impact

With no fields disclosed, the honest position is that the contents are unknown and the scale is the only firm figure. Five million unique records against a French retailer would represent a substantial share of its customer base, and a set of that size is valuable as a marketing and phishing list on volume alone, whatever the columns turn out to be. The gap between ten million rows and five million unique entries suggests the source is transactional rather than a clean customer table, since repeat purchases produce exactly that ratio. The more consequential claim is the sourcing. If the seller obtained this from an intermediary holding data from multiple companies, then other French brands are affected by the same underlying incident, and the retailer named here is one instance of a wider problem rather than the whole of it.

iStatus

Unverified

Evidence in the thread is thin on substance but unusually easy to test, since a ten thousand record sample is publicly downloadable and would settle the field question immediately for anyone who retrieves it. Dark Web Informer has not done so and is not linking those mirrors. The record counts are the seller's own. The claim of a third party supplier is the detail worth pursuing, though the post does not name that intermediary or describe how it was compromised, and the cross reference points only to another forum thread. Dark Web Informer is not reproducing the sample links, the referenced thread, or the contact address. The claim is unverified and the retailer has not publicly addressed it.

Want everything on this breach? Paid subscribers get the full claim details and more. Check out the threat feed, then after subscribing, search there for this alert. View pricing →

DARK WEB INFORMER - THREAT INTELLIGENCE

Latest