2026 FrenchInnov — Alduin scrape claim; ~1,600 client records + live payment keys (unverified)
Data compromised
Per Dark Web Informer (unverified): ~1,600 client/business records across two JSON files including addresses, phones, emails, SIREN/SIRET/VAT, POS terminal IDs, remote-access and database passwords, email passwords, and live payment gateway secret/publishable keys in free-text notes
Technical writeup
Unverified scrape / extortion-adjacent forum claim — August 20, 2026 (Dark Web Informer). Actor Alduin claimed to have scraped the CRM behind frenchinnov.fr (~1,600 client records, two JSON files totaling roughly 883KB + 1,067KB), stating credentials and live payment secret keys appeared in plaintext notes fields. Method framed as scraping rather than intrusion. FrenchInnov had not publicly confirmed at indexing. recordsAffected 1600 = actor client-record count (unverified).
Root cause
Unverified forum claim — actor Alduin says FrenchInnov restaurant CRM was scraped (not a classic intrusion), exposing client credentials and live payment gateway secrets