A threat actor has posted claims on a dark web forum alleging a significant data breach involving Detsky Mir Group, a leading retailer of children’s goods in Russia, Kazakhstan, and Belarus. The company is widely recognized as a key player in the children’s goods market.
According to the threat actor’s claims, the breach involves a dataset of 1.2 million records. The leaked data is said to be in CSV format and includes details such as names, emails, phone numbers, user agents, and dates. The post suggests that this information has been extracted from Detsky Mir’s customer base, raising concerns about the exposure of personal details from medium-income families, the primary demographic of the retailer’s target audience.
The dataset was allegedly leaked in 2024 and spans a variety of product categories, ranging from toys and apparel to car seats and furniture.
The threat actor also included a sample from the alleged leak.
