Armurerie Meneux
CriticalReportedRetail
On 23 October 2026, a threat actor using the alias ChimeraZ announced on a cybercrime forum the sale of data said to come from the website of Armurerie Meneux, a French hunting and sport-shooting retailer. The actor claims 930 invoices potentially covering 916 people, in a 47 MB archive in JSON and PDF formats. The visible sample shows first and last names, postal addresses, invoice numbers, the payment method, 907 SIA numbers (the French firearms information system) and 819 hunting licence references. No banking data, passwords or card numbers appear in the sample, and the source states that these figures are the actor's own claims and have not been confirmed.
Combining identity, postal address and firearm and hunting licence references could let a malicious third party target people identified as firearm owners or impersonate them in administrative procedures.
- Disclosed on
- October 23, 2026
- Accounts affected
- 916
- Sector
- Retail
- Country
- France
- Cause
- Undisclosed
Exposed data
- Full name
- Postal address
- Identity document
- Customer ID
- Order history
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact