> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# HomeMaison Data Sale Claim Lists 36.4 Million Records, 1.6M Emails and 330K Plaintext Passwords
- URL: https://darkwebinformer.com/homemaison-data-sale-claim-lists-36-4-million-records-1-6m-emails-and-330k-plaintext-passwords/
- Published: 2026-11-12T18:47:06.000Z
- Updated: 2026-11-12T18:47:06.000Z
- Author: Dark Web Informer
- Tags: Leaks

Data Exposure Report![France flag](https://flagcdn.com/w20/fr.png)FranceE-commerceCustomer & Payment DataPlaintext Passwords ClaimedUnverified

## HomeMaison Data Sale Claim Lists 36.4 Million Records, 1.6M Emails and 330K Plaintext Passwords

Claimed lines36,418,034

Emails\~1.6M

Phones\~1.3M

Claimed size10.4 GB

SeverityHIGH

### Overview

An actor using the handle **"Chimera"** claims to be selling a database associated with **HomeMaison**, a French online retailer specializing in home decoration and furniture.

The post advertises **36,418,034 lines** extracted from **2008 to 2026**, including approximately **1.6 million email addresses** and **1.3 million phone numbers**. The actor claims the archive contains **471 files** totaling **10.4 GB** in CSV and JSONL formats, and separately claims that about **330,000 customer passwords are stored in plaintext**. **The dataset, its source, the stated counts, plaintext-password claim and current availability have not been independently verified.**

### Post details

OrganizationHomeMaison

Country![France flag](https://flagcdn.com/w20/fr.png)France

SectorE-commerce / home decoration & furniture

Actor"Chimera"

Claimed period2008–2026

Claimed files471

FormatsCSV / JSONL

Claimed size10.4 GB

### What the post claims

- 36,418,034 total lines
- Approximately 1.6 million email addresses
- Approximately 1.3 million phone numbers
- 471 files
- 10.4 GB archive
- CSV and JSONL formats
- Data spanning 2008–2026
- Approximately 330K plaintext passwords claimed
- Customer records included
- Address and delivery records included
- Order records included
- Payment records included
- Shipment records included
- Invoice / billing plugin records included
- Customer comments included
- Completed and declined payment records included
- 2,000 samples advertised
- Price listed as make offer
- XMR payment requested; escrow accepted

The visible samples include direct customer identity, contact, address, order, payment, shipment and authentication-related fields. Those individual values, passwords, card data, payment tokens, IP addresses and invoice/payment details are not transcribed in this report.

Sponsored

[![WhiteIntel](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/whiteintel_io_banner.jpg)](https://whiteintel.io/?utm%5Fsource=darkwebinformer.com&utm%5Fmedium=referral&utm%5Fcampaign=whiteintel)

### Screenshots

[Screenshot 1Source screenshot![HomeMaison database-sale listing showing claimed record counts, period, archive size and plaintext-password claim](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/11/homemaison.png)](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/11/homemaison.png)[Screenshot 2Source screenshot![Continuation of the HomeMaison listing showing payment, shipment, invoicing, customer and shop-user datasets](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/11/homemaison_2.png)](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/11/homemaison%5F2.png)[Screenshot 3Source screenshot![Continuation of the HomeMaison listing showing completed and declined payment records, customer comments, sample mirrors and actor contacts](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/11/homemaison_3.png)](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/11/homemaison%5F3.png)

The supplied captures show the HomeMaison sale claim, stated record and archive figures, the plaintext-password claim, samples from customer, address, order, payment, shipment, billing, comment and transaction datasets, sample mirrors, pricing terms and actor contact identifiers. Personal and payment sample values are not reproduced here.

### IOCs & identifiers

Identifiers directly visible or supported by the supplied material. These support correlation and do not independently verify the dataset claim.

| Type                      | Identifier         | Source          |
| ------------------------- | ------------------ | --------------- |
| Actor handle              | Chimera            | Screenshots 1–3 |
| Telegram                  | @chimeradbs        | Screenshot 3    |
| XMPP                      | chimeraz@xmpp.is   | Screenshot 3    |
| Named organization domain | homemaison\[.\]com | Screenshots 1–3 |

The organization domain identifies the entity named in the claim, not malicious infrastructure. Individual customer emails, phone numbers, addresses, payment tokens, card values, IP addresses and passwords shown in the source material are intentionally not reproduced here.

### Mapped techniques

**Inferred** identifies an analytical mapping supported by the supplied material; it does not mean the activity has been independently verified.

- Collection[T1213.006](https://attack.mitre.org/techniques/T1213/006/)[Data from Information Repositories: Databases](https://attack.mitre.org/techniques/T1213/006/)InferredThe listing presents a large collection of structured CSV/JSONL customer, order, payment and transaction datasets. The supplied material does not disclose how the data was obtained or independently establish unauthorized access to HomeMaison systems.

### Potential impact

If authentic, the claimed dataset could expose **customer names, email addresses, phone numbers, postal addresses, order history, shipment information, billing/payment metadata and account credentials**. The separate claim that hundreds of thousands of passwords are stored in plaintext would materially increase the risk of credential reuse, account takeover and targeted fraud if accurate.

### Status Unverified

Dark Web Informer has **not independently verified** the dataset's authenticity, source, completeness, 36,418,034-line count, email or phone totals, 10.4 GB archive size, 330K plaintext-password claim, sample contents or current availability. The supplied screenshots document the listing and visible samples, not independent confirmation of the underlying data.

Want everything on this threat? **Paid subscribers** get the full unredacted claim details and more. After subscribing, check out the [threat feed](https://darkwebinformer.com/threat-feed/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=homemaison-data-leak-2026-11-12&utm%5Fcontent=threat-feed) and search there for this alert.

[View pricing →](https://darkwebinformer.com/pricing?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=homemaison-data-leak-2026-11-12&utm%5Fcontent=pricing-button)

[Dark Web Informer](https://darkwebinformer.com/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=homemaison-data-leak-2026-11-12&utm%5Fcontent=footer)