Ma Deco de Fête Data Leak Claim Lists 45,156 Records, Including Customer and Payment Data

Summary
An actor using ChimeraZ claims a 6 MB CSV tied to French retailer Ma Deco de Fête contains 45,156 lines and customer/payment data. The listing, dataset contents, counts, source and availability remain unverified.
Key points
- A listing attributed to actor ChimeraZ advertises a 6 MB CSV with 45,156 lines and data relating to approximately 13,000 people.
- The listing claims the dataset includes 11,137 unique email addresses, 10,793 MD5 password hashes, 10,704 phone numbers and 8,144 card numbers.
- It also references customer, payment, shipping and message CSV files; the article says visible samples include personal and payment-related information.
- A supplied screenshot documents the listing and visible samples, but does not independently verify the underlying dataset or unauthorized access.
- The dataset's authenticity, source, completeness, stated counts and current availability remain unverified.
Article Details
- Victim Organization
- Ma Deco de Fête
- Victim Domain
- madecodefete[.]com
- Incident Type
- Unverified data-leak claim
- Data Types Exposed
- Names
- Postal addresses
- Email addresses
- Phone numbers
- Password hashes
- Payment-card information
- Customer-service messages
- Affected Records
- 45,156 lines and approximately 13,000 people claimed; the counts have not been independently verified.
- Affected Data Size
- 6 MB CSV dataset claimed; not independently verified.
- Operational Impact
- No operational impact is reported. If authentic, the claimed data could enable customer-focused abuse.
- Ransom Or Extortion
- None reported.
- Claim Status
- claimed
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
chimeraz@xmpp[.]is | XMPP address listed as contact information for the alleged leak poster ChimeraZ; the attribution and dataset claim are unverified. |
