> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# ZeroGaspi Customer Records for 89,281 French Shoppers Sold for 70 Dollars
- URL: https://darkwebinformer.com/zerogaspi-customer-records-for-89-281-french-shoppers-sold-for-70-dollars/
- Published: 2026-09-03T14:35:15.000Z
- Updated: 2026-09-03T14:35:15.000Z
- Author: Dark Web Informer
- Tags: Data Breaches

Breach Report France Grocery Retail 70 USD 

## ZeroGaspi Customer Records for 89,281 French Shoppers Sold for 70 Dollars

A forum actor posting as **ksye** is selling what they describe as the customer database of **zerogaspi.fr**, a French retailer selling surplus and short dated groceries. The listing covers **89,281 records and is presented as one part of a larger set**, with the actor stating they obtained it on **1 September 2026**. The fields given are **email address, full name, mobile number, full postal address and order value**, and the published sample also carries a reference identifying the store or partner each order relates to. There are **no passwords, card details or account identifiers** in what is shown. The price is **70 dollars in Monero**. The claim is **unverified**.

Severity HIGH 

[ ![WhiteIntel, dark web exposure monitoring](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/whiteintel_io_banner.jpg) ](https://whiteintel.io/?utm%5Fsource=darkwebinformer.com&utm%5Fmedium=referral&utm%5Fcampaign=whiteintel) 

Records89,281

Price$70

ScopePart one

Actorksye

### ▣Post details

Targetzerogaspi.fr

CountryFrance

SectorGrocery retail

ListingSelling, Monero only

Volume89,281 in this part

ObtainedStated as 1 Sep 2026

ObservedSep 3, 2026

Actorksye

### !What the post claims

- 89,281 records in this part
- Described as a partial set
- Taken on 1 September 2026
- Email addresses
- Full names
- Mobile numbers
- Full postal addresses
- Street, postcode and city
- Order values
- Store or partner references
- Sample published inline
- Price of 70 US dollars
- Monero only
- Several contact channels given
- No passwords in sample
- No card data in sample
- No account identifiers
- No mechanism described

### ◱Screenshot

[ ![Forum listing selling an alleged ZeroGaspi customer database of 89,281 records, September 2026](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/09/92873562876582359678259786239578623.png) Screenshot 1 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/09/92873562876582359678259786239578623.png) 

Forum post offering ZeroGaspi customer records for sale, observed 3 September 2026.

### ☷Mapped techniques

The post describes no intrusion method. Both entries are inferred from the artefacts, not stated.

- Collection [T1213](https://attack.mitre.org/techniques/T1213/) Data from information repositories Inferred A uniform column set across tens of thousands of rows, including order values and store references, points to an export from the order system rather than data scraped from a public page.
- Exfiltration [T1567](https://attack.mitre.org/techniques/T1567/) Exfiltration over web service Inferred The sample is posted inline and the sale is arranged through several messaging services. The route out of the environment is not described.

### ⚠Potential impact

Name, mobile number, delivery address and order value together are **everything needed for a convincing delivery or refund approach**, and the store reference in each row narrows it further by naming the local shop the customer actually used. The stated capture date matters: if the data was taken on **1 September it describes current customers**, not a stale list, so anyone contacted has a live order to reason about. At **70 dollars, and framed as only one part**, the set will circulate widely and more of it is likely to follow.

### iStatus Unverified

The sample looks like real order data, with **postcodes matching their communes and the uneven formatting that hand entered addresses produce**, which is awkward to fabricate at length. Against that, the account is **three days old with no standing whatsoever**, no intrusion method or access route is given, and the partial framing means the advertised count cannot be checked against anything. Dark Web Informer has **not retrieved the data and is not linking the contact addresses**, and ZeroGaspi has not publicly addressed the claim.

Want everything on this breach? **Paid subscribers** get the full unredacted claim details and more. After subscribing, check out the [threat feed](https://darkwebinformer.com/threat-feed/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=zerogaspi-2026-09-03&utm%5Fcontent=threat-feed) and search there for this alert.

[View pricing →](https://darkwebinformer.com/pricing?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=zerogaspi-2026-09-03&utm%5Fcontent=pricing-button) 

[Dark Web Informer](https://darkwebinformer.com/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=zerogaspi-2026-09-03&utm%5Fcontent=footer) // Threat Intelligence