Répar'stores

HighConfirmedRetailSeptember 4, 2026

Répar'stores, a French franchise network specializing in repairing roller shutters, blinds and gates, suffered unauthorized access to its IT environment on 24 August 2026. The company notified its customers on 4 September 2026, reported the incident to France's data protection authority (CNIL) and filed a police complaint, stating that bank details and passwords were not affected. A person using the alias ChimeraZ subsequently advertised roughly 340 GB of data for sale, claiming about 1.87 million people are affected across 6.15 million records tied to customers, orders and invoices — a figure not confirmed by the company.

The exposed data links a customer to their address, orders and invoices, which enables targeted phishing attempts, including fake invoice-payment requests impersonating Répar'stores.

Disclosed on: September 4, 2026
Incident dated: August 24, 2026
Accounts affected: 1.9M
Sector: Retail
Country: France
Cause: Undisclosed

Exposed data

Full name
Postal address
Phone number
Email address
Customer ID
Order history
Employment data

You are only affected if you had an account or an order with this organisation.

What you can do

Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

Sources

Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact