Seller Claims FitnessBoutique Customer Dataset With 1.96 Million Records Is for Sale

Summary
A seller using the handle Syrv4x claims to offer 1.96 million FitnessBoutique customer records for $750. The dataset’s authenticity, source, size and availability have not been independently verified.
Key points
- The listing advertises 1,960,466 records in a 3.5 GB dataset for $750, negotiable.
- Claimed fields include names, email addresses, phone numbers, postal addresses, customer identifiers, and account, subscription and loyalty data.
- The seller, identified as Syrv4x, reportedly provided a 1,500-line sample; the article does not reproduce it because it contains personal information.
- The dataset, its source, the seller’s possession of the full material, and the stated record and data counts remain unverified.
- If authentic, the information could enable targeted phishing, impersonation and other social engineering against customers.
Article Details
- Victim Organization
- FitnessBoutique
- Victim Domain
- fitnessboutique[.]fr
- Incident Type
- Unverified customer-data exposure and dataset sale claim
- Disclosure Date
- 2026-10-02
- Data Types Exposed
- Customer names
- Email addresses
- Phone numbers
- Postal addresses and address objects
- GUIDs and customer GUIDs
- Customer IDs and customer numbers
- Account balances
- Subscription data
- Loyalty-related fields
- VAT numbers
- Vouchers
- Shop identifiers
- Other customer-account metadata
- Affected Records
- Seller claims 1,960,466 records, including 1,809,656 unique email addresses; counts are not independently verified.
- Affected Data Size
- Seller claims 3.5 GB; not independently verified.
- Operational Impact
- Not disclosed. The supplied material does not establish unauthorized access to FitnessBoutique systems.
- Ransom Or Extortion
- The seller advertises the dataset for $750, negotiable. No ransom demand or extortion activity is reported.
- Claim Status
- claimed
