Unverified claim: On 28 March 2026, FrenchBreaches flagged a threat-actor listing against Le Petit Vapoteur, a major French vaping retailer. The post claimed the full customer database—roughly 3,307,087 customers and 599 employees—was stolen and put up for sale, spanning records from 2012 to 2026.
This is the French “3.3 million” story sometimes miscited as FranceCasse. FranceCasse’s separate claim is about 1 million profiles.
What was allegedly exposed
FrenchBreaches summarized identity data, photos, addresses, and phone numbers among the sensitive fields. Company confirmation was not on record at indexing.
Action items
- Former and current Le Petit Vapoteur customers: rotate passwords and enable MFA where available.
- Assume old 2010s accounts may still be in the dump—age does not equal safety.
- Ignore “account verification” messages that demand payment or ID uploads.
Canonical record
https://breachhistory.com/le-petit-vapoteur/le-petit-vapoteur-forum2026 — FrenchBreaches.