Gefradis
ModerateReportedRetail
On 6 October 2026, a user of a cybercriminal forum announced the sale of a database attributed to Gefradis, a French online seller of joinery and home equipment. The seller claims to have extracted about 2,000 CSV files totalling more than 100,000 lines, and acknowledges that they contain duplicates, so the number of individuals affected is not established. The samples reviewed by the source include names, email addresses, phone numbers, billing and delivery addresses, account, quote and order identifiers, amounts paid, and business-related data. Gefradis has not confirmed the incident at this stage.
These data allow a malicious third party to target customers with phishing or fraudulent calls that reference genuine orders, quotes and amounts.
- Disclosed on
- October 6, 2026
- Sector
- Retail
- Country
- France
- Cause
- Undisclosed
Exposed data
- Full name
- Email address
- Phone number
- Postal address
- Order history
- Customer ID
- Employment data
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact