> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Second French Baby Retailer Allegedly Breached the Same Morning, This Time With Building Entry Codes
- URL: https://darkwebinformer.com/second-french-baby-retailer-allegedly-breached-the-same-morning-this-time-with-building-entry-codes/
- Published: 2026-08-21T16:35:15.000Z
- Updated: 2026-08-21T16:35:15.000Z
- Author: Dark Web Informer

Breach Report ![France flag](https://flagcdn.com/w40/fr.png)France E-commerce / Baby Products $1,000 USD 

## Second French Baby Retailer Allegedly Breached the Same Morning, This Time With Building Entry Codes

A forum user posting as **ChimeraZ** is selling what they describe as the database of **allobebe.fr**, a French retailer of baby products and childcare equipment, covering **2,175,216 records across 1,136,058 people** and spanning **orders placed from 2006 through 2026**. The set is split into an address file and an order file. Beyond names, emails, mobile and landline numbers and full addresses, the address records carry a free text delivery note field which, in the seller's own sample, contains **a building door code and interphone instructions**. The asking price is **$1,000 in Monero**, with **2,000 records already published free across nine file hosts**. The claim is **unverified**.

Severity CRITICAL 

[ ![WhiteIntel sponsor banner](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/whiteintel_io_banner.jpg) ](https://whiteintel.io/?utm%5Fsource=darkwebinformer.com&utm%5Fmedium=referral&utm%5Fcampaign=whiteintel) 

People1,136,058

Records2.18M

History2006 to 2026

ActorChimeraZ

### ▣Post details

Targetallobebe.fr

Country![France flag](https://flagcdn.com/w40/fr.png)France

SectorBaby and childcare retail

ListingSelling, XMR only

Volume850MB, two JSON files

Samples2,000 records, 9 mirrors

ObservedAug 21, 2026

ActorChimeraZ

### !Allegedly included

- Customer full names
- Titles and salutations
- Email addresses
- Mobile phone numbers
- Landline numbers
- Full street addresses
- Address complements
- Building entry codes
- Interphone instructions
- Postal codes and cities
- Order numbers and totals
- Purchased product details
- Payment method type
- Two decades of history

### ◱Screenshot

[ ![Allobebe France baby products customer database sale forum post screenshot, August 2026](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/2798356982765987235698726359871.png) Screenshot 1 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/2798356982765987235698726359871.png) 

### ⚠Potential impact

The delivery note field is what lifts this above an ordinary retail breach. Customers routinely write down **the door code, the floor, which interphone button to press and where a parcel can be left**, and the seller's own sample shows exactly that. Paired with a full address and the fact that the purchases identify **a household with an infant**, the result is physical access information about homes with young children, which is not something a family can revoke without changing the code for the whole building. The **twenty year span** compounds it in an unusual way: people who ordered in 2006 are unlikely to remember the retailer holds their details, many have since moved, and children recorded then are adults now. Two contactable phone numbers per person and a full order history also make **delivery and refund pretexts easy to construct**.

### iStatus

Unverified 

This is the **second French baby goods retailer listed by the same actor within the same hour**, the other being a comparable set of around 960,000 people. The two posts share a contact identity and a common structure, and both sit outside the numbered platform series this actor is separately running. Whether the pairing reflects a shared supplier, a shared hosting arrangement or simply one seller working through a sector is **not stated anywhere in either post and should not be assumed**. Record counts are the seller's own, and the gap between lines and people reflects repeat orders. Dark Web Informer is **not reproducing the sample mirrors, the contact route, or the names, addresses, phone numbers and entry code** shown in the post. The claim is **unverified** and the retailer has not publicly addressed it.

Want everything on this breach? **Paid subscribers** get the full claim details and more. Check out the [threat feed](https://darkwebinformer.com/threat-feed/), then after subscribing, search there for this alert. [View pricing →](https://darkwebinformer.com/pricing) 

[DARK WEB INFORMER](https://darkwebinformer.com/) \- THREAT INTELLIGENCE