A file attributed to Alain Afflelou has been circulating on the dark web since late October 2026. It contains personal data, orders, and masked banking references affecting several hundred customers.
Emperador Claim and Limited Scope of the Leak
On 26 October 2026 the Emperador collective listed the French retailer on its dark web disclosure site. ZATAZ analysis found only 921 customer records linked to distinct email addresses, 1,379 postal addresses, dates of birth, phone numbers, declared gender, Salesforce identifiers, and commercial subscription information. The dataset also holds 5,291 orders and 8,371 payment operations, far below the scale suggested in online claims.
The structure covers customer profiles, orders, deliveries, and transactions. Attackers could use these authentic commercial references to craft more convincing phishing messages about eyewear orders, lens renewals, or pending deliveries.
Masked Banking Data and Transaction History
ZATAZ identified 1,440 card entries corresponding to 1,424 distinct references. All card numbers are masked with stars, showing only the first six and last four digits. Expiration dates, payment networks, issuing countries, transaction identifiers, and 3D Secure indicators are also present, but full card numbers and CVVs are absent.
The file records 8,371 payment operations, of which 8,239 were card payments. Metadata mention a total transaction value of several hundred thousand euros. The oldest technical creation date is 10 September 2017, while the earliest actual order date is 8 March 2021 and the most recent order is dated 25 October 2026.
Logistics details include 5,281 shipments and 4,181 distinct tracking numbers, allowing reconstruction of purchase and delivery paths.
