An alleged data breach targeting the French retail giant Boulanger has been reported by a threat actor on a dark web forum, where the individual claims to be selling a stolen database containing over four million user records.
According to the forum post, the threat actor is offering what they describe as the “Boulanger database,” reportedly consisting of 4,019,713 rows and totaling approximately 382 megabytes in size. The post also includes a sample, allegedly as proof of the data’s authenticity, although this sample has not been independently verified.
The nature of the data allegedly includes sensitive customer information.
It remains unclear whether the breach, as alleged, is genuine. Cybersecurity experts often caution that data sold on underground forums can sometimes be repackaged from older breaches or falsified altogether.
Nonetheless, the threat actor’s claim has attracted attention in the cybercrime monitoring community, as Boulanger is one of France’s largest electronics and appliance retailers.