A database allegedly containing sensitive customer information from Alshaya Group, a leading brand franchise operator, has surfaced on a dark web forum. The post claims to have leaked over 280,000 rows of data from the company, dating back to 2021.
The database is reported to contain 281,069 rows of detailed personal information, including names, emails, phone numbers, ZIP codes, and billing addresses. The leaked data also allegedly includes sensitive customer identifiers such as account creation details, confirmed emails, and VAT numbers.
Alshaya Group operates numerous international brands across the Middle East, North Africa, and Europe, making this breach potentially impactful across a wide geographic area.
The data structure includes columns such as ID, Name, Email, Group, Phone, Country, State/Province, Date of Birth, and other customer-related information. The threat actor also provided a sample of the alleged data.
