2026 Allo.Solar — forum leak claim (~101,349 customers / ~208K orders; unverified)
Data compromised
Advertised: full names, phones, street addresses, cities, postcodes (billing + delivery), order totals, payment method/processor, last four card digits, itemised order contents — ~208,694 order lines / 101,349 individuals / 222MB JSON. Unverified.
Technical writeup
Unverified forum leak listing — observed July 27, 2026 on Dark Web Informer. Actor “ChimeraZ” published what they described as the Allo.Solar (French solar e-commerce) database: 208,694 order lines covering 101,349 individuals as a 222MB JSON file, offered free. Sample reportedly showed full names, phones, street addresses, cities and postcodes for billing and delivery parties, order totals, payment method and processor, last four payment-card digits, and complete itemised order contents. Actor claimed intrusion roughly two weeks prior and framed the release around the Gironde wildfire emergency. Allo.Solar had not confirmed the claim at indexing. BreachHistory indexes the actor-cited 101,349 count clearly labeled unverified.
Root cause
Unverified forum leak by actor “ChimeraZ” claiming Allo.Solar customer/order database published free — company had not confirmed at indexing