xNov Allegedly Leaks Smarteez Production Database Used by L’Oréal Morocco
Summary
DarkWebInformer reports that xNov leaked Smarteez’s production database for L’Oréal Morocco, allegedly exposing data on 296 pharmacies, 361,000+ sales records, OAuth client secrets, user-account hashes and competitive intelligence.
Key points
- DarkWebInformer attributes the alleged public database leak to threat actor xNov; the article provides no independent confirmation.
- The database reportedly covers operations for La Roche-Posay, Vichy, CeraVe and Dercos from mid-2023 to early 2026.
- Reportedly exposed data includes 296 pharmacies’ location and territory details and more than 361,000 sales analytics records.
- The article says the dump contains 22 OAuth2 apps with plaintext client secrets, 26 PBKDF2-hashed user accounts and 519 Django session records.
- Other reported contents include more than one million merchandising and competitive-intelligence media files and a 4,504-entry admin action log.
Article Details
- Victim Organization
- Smarteez (operating for L’Oreal Morocco)
- Incident Type
- Alleged production-database breach and public data leak
- Data Types Exposed
- Pharmacy locations and territory details
- Sales analytics
- OAuth2 client IDs and plaintext client secrets
- PBKDF2-hashed user accounts
- Django session records
- Merchandising and competitive-intelligence media
- Admin audit logs
- System configuration details
- Affected Records
- The article reports 296 pharmacies, over 361,000 sales analytics records, 22 OAuth2 apps, 26 hashed user accounts, 519 Django session records, and a 4,504-entry admin action log.
- Affected Data Size
- The article reports more than 1 million merchandising and competitive-intelligence media files, in addition to over 361,000 sales analytics records.
- Operational Impact
- The article reports exposure of Smarteez’s production database and associated operational data; it does not report service disruption.
- Ransom Or Extortion
- None reported
- Claim Status
- claimed