> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Planity Database Allegedly for Sale, 999,451 Customers of French Salons and Spas Listed
- URL: https://darkwebinformer.com/planity-database-allegedly-for-sale-999-451-customers-of-french-salons-and-spas-listed/
- Published: 2026-07-28T20:27:09.000Z
- Updated: 2026-07-28T20:27:09.000Z
- Author: Dark Web Informer
- Tags: Data Breaches

Breach Report ![France flag](https://flagcdn.com/w40/fr.png)France Beauty & Wellness / Booking Data for Sale 

## Planity Database Allegedly for Sale, 999,451 Customers of French Salons and Spas Listed

A seller posting as **weykofa** is advertising what they describe as the database of **Planity**, the French online booking platform used by hair salons, beauty businesses, and spas to manage appointments and customer records. The listing claims **1,088,463 lines covering 999,451 individuals**, supplied as a 261MB JSON file. The posted sample shows **customer names, phone numbers in multiple formats, email addresses, and a business identifier linking each customer to the specific salon or spa they booked with**, alongside record creation timestamps. The asking price is **$2,500 in Bitcoin**, described as negotiable. The claim is **unverified**.

Severity HIGH 

People999,451

Lines1,088,463

Price$2,500

Actorweykofa

### ▣Post details

TargetPlanity

Country![France flag](https://flagcdn.com/w40/fr.png)France

SectorBeauty & wellness booking

ListingData for sale — $2,500, BTC

Volume261MB JSON

DataCustomer PII, business linkage

ObservedJul 28, 2026

Actorweykofa

### !Allegedly included

- Customer names
- Phone numbers
- Alternate phone formats
- Email addresses
- Business identifiers
- Customer record IDs
- Object identifiers
- Record creation timestamps
- Deletion timestamps
- Import status flags

### ◱Screenshot

[ ![Planity France booking platform database sale listing screenshot, July 2026](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/07/273895692873649876235987623598723.png) Screenshot 1 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/07/273895692873649876235987623598723.png) 

### ⚠Potential impact

This is a contact dataset rather than a credential one: **no passwords, payment details, or appointment histories appear in the sample**, and the direct fraud risk is correspondingly limited. Its value to a buyer lies in quality rather than depth. A verified mobile number attached to a real name, for a population of roughly a million French consumers, is a strong input for **SMS-based fraud**, and appointment reminders are a message type these customers are conditioned to receive and act on. The **business identifier** is what makes the set more than a generic contact list. Because each customer is mapped to the specific salon or spa they booked with, a fraudulent message can name the establishment a person actually uses, which removes the main cue people rely on to spot impersonation. That linkage also creates a modest privacy exposure in its own right, since beauty and wellness patronage is not something everyone treats as public, and certain categories of clinic carry more sensitivity than a hairdresser does. Two structural details deserve attention. The presence of **deletion timestamps** suggests records marked as deleted remain present in the export, which raises a question about whether individuals who exercised erasure rights are still represented in the data; soft deletion is a routine engineering pattern and not in itself a violation, but under **GDPR** it becomes a question the operator would need to answer. The sample also contains at least one address on the platform's own corporate domain, indicating **staff or test records are mixed into the customer set**. The claim is unverified.

### iStatus

Unverified 

The listing includes a record sample and routes contact through an encrypted messenger, which Dark Web Informer is not reproducing, with payment restricted to Bitcoin. The seller account was **created this month and has almost no posting history or standing**, which weighs against the listing. Against that, the sample structure is internally consistent, uses identifier formats and field naming of a kind associated with hosted search and database services rather than a hand-assembled list, and the stated file size is proportionate to the record count. The post has been **edited twice since publication**. Neither the record count nor the dataset has been independently corroborated. The claim is **unverified** and Planity has not publicly addressed it. Customers may wish to treat appointment reminders and booking messages arriving by SMS with additional care, particularly any that request payment or personal details.

Want everything on this breach? **Paid subscribers** get the full claim details and more. Check out the [threat feed](https://darkwebinformer.com/threat-feed/), then after subscribing, search there for this alert. [View pricing →](https://darkwebinformer.com/pricing) 

[DARK WEB INFORMER](https://darkwebinformer.com/) \- THREAT INTELLIGENCE