2026 Made in Bebe — ChimeraZ sale claim; ~960,106 customers + delivery addresses (unverified)
Data compromised
Per Dark Web Informer (unverified): ~960,106 people, 1.36M invoice lines, 1.45GB JSON — names, billing/delivery addresses, invoice/order metadata, item descriptions/barcodes, totals/tax, payment method type, invoice PDF filenames; samples/mirrors cited; no passwords/PANs in sample framing
Technical writeup
Unverified criminal-forum sale claim — August 21, 2026 (Dark Web Informer). Actor ChimeraZ advertised a Made in Bebe (madeinbebe.com) customer database: ~960,106 people, ~1.36M invoice lines, 1.45GB JSON, $600 XMR, 1,000-record samples across eight mirrors. Claimed fields center on identity, billing/delivery addresses, and invoice/order detail useful for delivery/refund fraud against households with infants. Made in Bebe had not publicly confirmed at indexing. Same-morning sibling claim: allobebe-chimeraz2026. recordsAffected 960106 = actor people count (unverified).
Root cause
Unverified forum sale — actor ChimeraZ claims Made in Bebe (madeinbebe.com) customer/invoice database extracted and offered for $600 XMR