ZeroGaspi Customer Records for 89,281 French Shoppers Sold for 70 Dollars
A forum actor posting as ksye is selling what they describe as the customer database of zerogaspi.fr, a French retailer selling surplus and short dated groceries. The listing covers 89,281 records and is presented as one part of a larger set, with the actor stating they obtained it on 1 September 2026. The fields given are email address, full name, mobile number, full postal address and order value, and the published sample also carries a reference identifying the store or partner each order relates to. There are no passwords, card details or account identifiers in what is shown. The price is 70 dollars in Monero. The claim is unverified.
▣Post details
!What the post claims
- 89,281 records in this part
- Described as a partial set
- Taken on 1 September 2026
- Email addresses
- Full names
- Mobile numbers
- Full postal addresses
- Street, postcode and city
- Order values
- Store or partner references
- Sample published inline
- Price of 70 US dollars
- Monero only
- Several contact channels given
- No passwords in sample
- No card data in sample
- No account identifiers
- No mechanism described
◱Screenshot
☷Mapped techniques
The post describes no intrusion method. Both entries are inferred from the artefacts, not stated.
- Collection T1213 Data from information repositories Inferred A uniform column set across tens of thousands of rows, including order values and store references, points to an export from the order system rather than data scraped from a public page.
- Exfiltration T1567 Exfiltration over web service Inferred The sample is posted inline and the sale is arranged through several messaging services. The route out of the environment is not described.
⚠Potential impact
Name, mobile number, delivery address and order value together are everything needed for a convincing delivery or refund approach, and the store reference in each row narrows it further by naming the local shop the customer actually used. The stated capture date matters: if the data was taken on 1 September it describes current customers, not a stale list, so anyone contacted has a live order to reason about. At 70 dollars, and framed as only one part, the set will circulate widely and more of it is likely to follow.
iStatus Unverified
The sample looks like real order data, with postcodes matching their communes and the uneven formatting that hand entered addresses produce, which is awkward to fabricate at length. Against that, the account is three days old with no standing whatsoever, no intrusion method or access route is given, and the partial framing means the advertised count cannot be checked against anything. Dark Web Informer has not retrieved the data and is not linking the contact addresses, and ZeroGaspi has not publicly addressed the claim.
Dark Web Informer // Threat Intelligence
