Diamant Factory (diamantfactory.fr)
ModerateReportedRetail
An attacker using the alias Cybernox claims to have obtained a database attributed to jeweler Diamant Factory (stores in Monaco and Aix-en-Provence) and has been offering it for sale since September 19, 2026. The claimed 24,094 rows, spanning more than ten years of activity, correspond to order and after-sales service records: customer names and phone numbers, detailed jewelry descriptions (characteristics, weight, values sometimes estimated at tens of thousands of euros) and intervention histories. The attacker claims to have exploited an IDOR flaw; neither the company nor the French data protection authority has confirmed the incident so far.
Linking a client's identity to the precise value of jewelry they ordered makes it easier to target them with fraud or social-engineering attempts aimed at identified high-net-worth customers.
- Disclosed on
- September 19, 2026
- Sector
- Retail
- Country
- MC
- Cause
- Misconfigured database
Exposed data
- Full name
- Phone number
- Order history
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
- Diamonds FactoryFrenchBreaches
- Diamonds Factory : 24 000 dossiers clients revendiqués après une cyberattaqueCyberattaque.org
- Diamant Factory : fuite de données revendiquée sur 24 094 lignes de commandesFuites Infos
- Cybernox multiplie les revendications de fuites en FranceZATAZ
- Diamant Factory victime d'un piratage : 24 094 lignes de données...FrenchBreaches
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact