2026 Allobébé — ChimeraZ sale claim; ~1.14M people + building entry codes (unverified)
Data compromised
Per Dark Web Informer (unverified): ~1,136,058 people, 2.18M records, 850MB two JSON files — names, emails, phones, full addresses, building entry codes, interphone instructions, orders/products, payment method type; samples across nine mirrors; no passwords/PANs in sample framing
Technical writeup
Unverified criminal-forum sale claim — August 21, 2026 (Dark Web Informer). Actor ChimeraZ advertised Allobébé (allobebe.fr) customer data the same morning as a Made in Bebe listing: ~1,136,058 people, ~2.18M records, 850MB across two JSON files, claimed history 2006–2026. DWI highlights building entry codes and interphone/delivery instructions alongside standard retail PII — elevating physical-access risk for households with infants. Allobébé had not publicly confirmed at indexing. Sibling claim: made-in-bebe-chimeraz2026. recordsAffected 1136058 = actor people count (unverified).
Root cause
Unverified forum sale — actor ChimeraZ claims Allobébé (allobebe.fr) customer database with delivery digicodes/interphone notes, history 2006–2026