France
E-commerce
Customer & Payment Data
Leak Claim
Unverified
Ma Deco de Fête Data Leak Claim Lists 45,156 Records With Customer and Payment Information
Overview
An actor using the handle "ChimeraZ" claims to have leaked a Ma Deco de Fête dataset. The listing describes the company as an online shop selling party decorations and personalized invitations for weddings, birthdays, baptisms and other special events.
The post advertises 45,156 lines covering approximately 13,000 people in a 6 MB CSV dataset. The actor lists 12,548 unique addresses, 11,137 unique email addresses, 10,793 unique MD5 password hashes, 10,704 unique phone numbers, 8,144 unique card numbers and 4,012 unique messages. The dataset, its source, the stated counts and current availability have not been independently verified.
Post details
FranceWhat the post claims
- 45,156 lines advertised
- Approximately 13,000 people
- 12,548 unique addresses
- 11,137 unique email addresses
- 10,793 unique MD5 password hashes
- 10,704 unique phone numbers
- 8,144 unique card numbers
- 4,012 unique messages
- 6 MB CSV dataset
- Addresses CSV referenced
- Clients CSV referenced
- Payments CSV referenced
- Colissimo / shipping CSV referenced
- Messages CSV referenced
- Multiple download mirrors provided
The visible samples contain names, postal addresses, phone numbers, email addresses, password hashes, payment-related values and customer-service messages. Those individual values are not transcribed in this report.
Screenshots
IOCs & identifiers
Identifiers directly visible or supported by the supplied material. These support correlation and do not independently verify the dataset claim.
| Type | Identifier | Source |
|---|---|---|
| Actor handle | ChimeraZ | Screenshot 1 |
| Telegram | @chimeradbs | Screenshot 1 |
| XMPP | chimeraz@xmpp.is | Screenshot 1 |
| Named organization domain | madecodefete[.]com | Screenshot 1 |
The organization domain identifies the company named in the claim, not malicious infrastructure. No malware hash, Tox ID, Session ID or attacker-controlled IP address is visible. Direct download mirrors and personal/customer identifiers shown in the source material are intentionally not reproduced here.
Mapped techniques
Claimed identifies behavior explicitly described by the actor. Inferred identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified.
- Collection T1213.006 Data from Information Repositories: Databases Inferred The listing presents multiple structured CSV datasets containing customer, payment, shipping and message information. The supplied material does not disclose how the data was obtained or independently establish unauthorized access to Ma Deco de Fête systems.
Potential impact
If authentic, the claimed dataset could expose names, postal addresses, email addresses, phone numbers, password hashes, payment-card information and customer messages. The combination could support credential attacks, targeted phishing, identity fraud, payment fraud and other customer-focused abuse.
Status Unverified
Dark Web Informer has not independently verified the dataset's authenticity, source, completeness, 45,156-line count, unique-value totals, sample contents or current availability. The supplied screenshot documents the listing and visible samples, not independent confirmation of the underlying data.
