2026 Sephora France — forum database-for-sale claim; 15M records (unverified)
Data compromised
Actor-claimed: customer profile and loyalty program data including names, emails, phone numbers, dates of birth, postal addresses, purchase history/order stats, loyalty points, and store preferences—unverified
Technical writeup
Unverified criminal-forum sale claim — observed July 12, 2026. Intel and Breaches (IBreaches) reported a threat actor advertised a database allegedly associated with Sephora France, claiming approximately 15 million customer records including profile and loyalty fields (names, emails, phone numbers, date of birth, addresses, purchase history, and loyalty points). The authenticity, source, and breach timeline were not independently verified in public reporting reviewed at indexing time, and Sephora had not issued a matching breach confirmation. BreachHistory catalogs the claim as unverified and uses the actor-cited 15 million figure as recordsAffected until attested scope emerges.
Root cause
Unverified cybercrime-forum listing advertising an alleged Sephora France customer/loyalty database for sale—Sephora had not confirmed at catalog time