2026 FranceCasse — ~1M customer profiles claimed (PrestaShop dump; unverified)
Data compromised
Names, emails, addresses, DOB, hashed passwords, orders, Mangopay IDs, partner codes (per Fuites Infos claim)
Technical writeup
Unverified leak-site / French breach-tracker claim: on 29 January 2026, Fuites Infos and FrenchBreaches reported a claimed breach of FranceCasse (francecasse.fr), a major French used auto-parts marketplace. Actors allegedly offered a ~98 GB PrestaShop-structured dump covering more than one million customer profiles plus platform source code, citing an unauthenticated API endpoint exposed around June 2025. Claimed fields include names, emails, postal addresses, DOB/gender, hashed passwords, order history, professional SIRET fields, Mangopay payment identifiers, and partner Careco codes. Company confirmation was not established at indexing. Note: a separate French e-commerce claim (Le Petit Vapoteur, ~3.3M) is sometimes confused with this row—FranceCasse trackers cite ~1M, not 3.3M.
Root cause
Unverified forum claim — alleged unauthenticated API / PrestaShop data exposure