Boulanger

ModerateConfirmedRetailSeptember 11, 2026

On September 11, 2026, a hacker using the alias "fuie" posted a database of 132,230 records attributed to Boulanger.com on a cybercrime forum. File analysis shows these are after-sales service and warranty files opened between 2010 and September 2026 in about fifty stores of the Ex&Co partner network (Expert and Connexion brands), covering roughly 61,000 distinct customers. Each file links the customer's name, address, phone number and email to precise device details (brand, model, serial number) and to the purchase or repair case. Neither Boulanger nor Ex&Co had publicly confirmed the incident as of September 12, 2026.

These details could let a third party credibly impersonate after-sales support by referencing the customer's actual device, to push fake repair or warranty-extension offers.

Disclosed on: September 11, 2026
Accounts affected: 61,275
Sector: Retail
Country: France
Cause: Undisclosed

Exposed data

Email address
Full name
Phone number
Postal address
Order history
Other personal data

You are only affected if you had an account or an order with this organisation.

What you can do

Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

Sources

Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact