Hespéride
ModerateReportedRetail
Hespéride, a French outdoor furniture and garden retailer, notified about 7,700 customers of a data breach at a technical provider that handles delivery tracking and the related notifications. The provider reportedly suffered the exploitation of a vulnerability in a data analytics tool between 17 and 20 August 2026, and an unauthorised third party may have accessed and extracted some of the data. The data involved are surname, first name, email address, phone number and, in some cases, postal address. According to Hespéride, payment details, loyalty accounts, order details and passwords are not affected, and no fraudulent use is known to date.
These contact details allow a malicious third party to craft credible phishing messages or fake delivery alerts impersonating the retailer or a carrier.
- Disclosed on
- October 6, 2026
- Incident dated
- August 17, 2026
- Accounts affected
- 7,700
- Sector
- Retail
- Country
- France
- Cause
- Third-party provider
Exposed data
- Full name
- Email address
- Phone number
- Postal address
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact