
Personal information of over 27 million customers of French electronics giant Boulanger has been made freely available online after a massive leak, without any ransom demands.
Cybersecurity experts have recorded a large leak of personal data, allegedly related to Boulanger customers. The database appeared not on the darknet, but on a regular public forum. The hacker published two sets of data: the full (16 GB, 27.5 million records) and the cleaned version (500 MB, approximately 5 million records). According to SafetyDetectives, the actual number of unique records is slightly more than 1 million. The leaks include full names, addresses, emails and phone numbers of customers. There are no passwords in the leak, but the available information is enough to organize phishing attacks and scam campaigns.
The data leak is likely the result of a ransomware attack that took place in September 2024. Other French retailers were also affected at that time, including Truffaut and Cultura. The hacker under the nickname “horrormar44” was already offering the data for sale for 2,000€, but it is now being distributed for free. Boulanger has not yet officially commented on the incident.
The massive Boulanger data leak highlights the threat to users even after the initial attack: old stolen databases can reappear. Customers are advised to be extremely vigilant, carefully check suspicious emails and avoid clicking on unknown links.