Climb Up
HighReportedRetail
On 14 October 2026, a seller claimed on a forum to be offering a database attributed to Climb Up, a French indoor climbing gym network. The seller says it holds about 151,000 customer records from 29 sites in France, about 93.5 MB of data dated January 2016 to March 2026, and offers a 1,000-record sample. The listed fields include surnames and first names, customer identifiers, birth dates, postal addresses, phone numbers, email addresses, home site, online account information and family links between accounts. The 151,000 figure is an unverified claim, the compromised-user-account hypothesis is not officially confirmed, and the organisation has not commented so far.
The combination of identity, birth date, contact details and family links would allow a third party to run targeted phishing attempts, including ones aimed at minors or relatives.
- Disclosed on
- October 14, 2026
- Sector
- Retail
- Country
- France
- Cause
- Undisclosed
Exposed data
- Full name
- Customer ID
- Date of birth
- Postal address
- Phone number
- Email address
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact