Alain Afflelou Customer Data and Masked Payment Details Leaked on Dark Web by Emperador
A file attributed to French eyewear retailer Alain Afflelou has been circulating on the dark web since late October 2026, containing personal customer information, orders, and masked banking references for hundreds of clients. The Emperador hacking collective claimed responsibility on October 26, 2026, but analysis by ZATAZ shows the actual dataset is far smaller than initially reported online. The leak includes 921 customer profiles with email addresses, 5,291 orders, 8,371 payment transactions, postal addresses, birth dates, phone numbers, Salesforce identifiers, and subscription details. Banking card references appear masked with stars, showing only the first six and last four digits along with expiration dates and 3D Secure indicators, rendering full card numbers unusable. The data spans activity from 2017 through October 2026 and includes shipping records with tracking numbers. ZATAZ notes references to an unauthenticated API and pre-production environment but does not confirm any exploitable vulnerability. The incident highlights risks of targeted phishing using authentic commercial references from the breach.
ZATAZNov 8, 2026Translated from French