France
E-commerce / Baby Products
$600 USD
Nearly a Million French Customers of a Baby Goods Retailer Allegedly Exposed With Delivery Addresses
A forum user posting as ChimeraZ is selling what they describe as the database of madeinbebe.com, a French retailer of products for babies and children, comprising 1,359,546 invoice lines covering 960,106 people in 1.45GB of JSON. The published sample shows complete invoice records pairing a named customer with their billing and delivery address, the items bought, and the order value. No card numbers appear, only the payment type. The asking price is $600 in Monero, and the seller has separately published a thousand sample records free across eight file hosts, meaning a portion of the data is already circulating at no cost. The claim is unverified.
▣Post details
France!Allegedly included
- Customer full names
- Billing addresses
- Delivery addresses
- Postal codes and cities
- Invoice numbers and dates
- Order numbers
- Purchased item descriptions
- Product barcode references
- Quantities and unit prices
- Order totals and tax
- Payment method type
- Invoice PDF filenames
- Internal reference numbers
- Shipping dates
◱Screenshot
⚠Potential impact
No passwords or card numbers appear in the sample, so the direct financial risk is limited. The sensitivity lies in what the purchases imply. A retailer of this kind produces, in effect, a list of French households with infants or young children, at confirmed delivery addresses, with the dates those purchases were made. That is a category of information most parents would not expect to be inferable from a shopping record, and it is not something an affected family can change the way they would a password. For fraud, the pairing of a real invoice number, real items and a real address makes delivery and refund pretexts unusually convincing, and the invoice filenames suggest matching PDF documents exist. The scale also makes this attractive as a marketing list. Because a thousand records are already published free across multiple hosts, some exposure exists regardless of whether the full set ever sells.
iStatus
UnverifiedThis appears to be separate from the numbered platform series the same actor is running, which reached its eleventh release the previous day: there is no release number, no shared platform named, and this one is priced rather than free. The sample is a single well formed invoice record consistent with an order export, which supports the structure without confirming the volume, and the counts of lines and of people are the seller's own. The distinction between the two figures is worth preserving, since roughly 400,000 of the lines represent repeat orders rather than additional individuals. Dark Web Informer is not reproducing the sample mirrors, the contact route, or the customer name and address shown in the post. The claim is unverified and the retailer has not publicly addressed it.
DARK WEB INFORMER - THREAT INTELLIGENCE
