France
E-commerce / Baby Products
$1,000 USD
Second French Baby Retailer Allegedly Breached the Same Morning, This Time With Building Entry Codes
A forum user posting as ChimeraZ is selling what they describe as the database of allobebe.fr, a French retailer of baby products and childcare equipment, covering 2,175,216 records across 1,136,058 people and spanning orders placed from 2006 through 2026. The set is split into an address file and an order file. Beyond names, emails, mobile and landline numbers and full addresses, the address records carry a free text delivery note field which, in the seller's own sample, contains a building door code and interphone instructions. The asking price is $1,000 in Monero, with 2,000 records already published free across nine file hosts. The claim is unverified.
▣Post details
France!Allegedly included
- Customer full names
- Titles and salutations
- Email addresses
- Mobile phone numbers
- Landline numbers
- Full street addresses
- Address complements
- Building entry codes
- Interphone instructions
- Postal codes and cities
- Order numbers and totals
- Purchased product details
- Payment method type
- Two decades of history
◱Screenshot
⚠Potential impact
The delivery note field is what lifts this above an ordinary retail breach. Customers routinely write down the door code, the floor, which interphone button to press and where a parcel can be left, and the seller's own sample shows exactly that. Paired with a full address and the fact that the purchases identify a household with an infant, the result is physical access information about homes with young children, which is not something a family can revoke without changing the code for the whole building. The twenty year span compounds it in an unusual way: people who ordered in 2006 are unlikely to remember the retailer holds their details, many have since moved, and children recorded then are adults now. Two contactable phone numbers per person and a full order history also make delivery and refund pretexts easy to construct.
iStatus
UnverifiedThis is the second French baby goods retailer listed by the same actor within the same hour, the other being a comparable set of around 960,000 people. The two posts share a contact identity and a common structure, and both sit outside the numbered platform series this actor is separately running. Whether the pairing reflects a shared supplier, a shared hosting arrangement or simply one seller working through a sector is not stated anywhere in either post and should not be assumed. Record counts are the seller's own, and the gap between lines and people reflects repeat orders. Dark Web Informer is not reproducing the sample mirrors, the contact route, or the names, addresses, phone numbers and entry code shown in the post. The claim is unverified and the retailer has not publicly addressed it.
DARK WEB INFORMER - THREAT INTELLIGENCE
