2026 Dürninger (duerninger.de) — free SQL database leak claim (unverified)
Data compromised
Actor-claimed SQL dump: customer records, order/invoice and shipping/transaction details, emails, password hashes, names, physical addresses, phone numbers, IBANs, BICs, and other banking-related fields—unverified; no attested row count
Technical writeup
Unverified free forum dump claim — observed July 21, 2026. Daily Dark Web reported a threat actor published what they claim is a free SQL database belonging to duerninger.de (Dürninger), a German tobacco/cigar retailer. The listing allegedly includes customer records, order and invoice information, shipping and transaction details, email addresses, password hashes, names and physical addresses, phone numbers, IBANs, BICs, and other banking-related information, with sample SQL tables shown. Daily Dark Web stated it had not independently verified authenticity or that the data originated from a compromise of duerninger.de. Dürninger had not issued a matching public confirmation at indexing time. BreachHistory retains recordsAffected 0 because no victim count was cited.
Root cause
Unverified cybercrime-forum free release of alleged SQL database from German retailer duerninger.de—company had not confirmed at catalog time