Forum User Claims Bureau Vallée Customer Data Was Taken via Supplier
Summary
A forum user claims to be selling Bureau Vallée customer data allegedly taken through a supplier that exported daily store files. The post describes injection flaws and persistent access, but the claim is unverified.
Key points
- Forum user misere claims the data came from a third-party supplier, not directly from Bureau Vallée.
- The post alleges that daily customer files from each store were exported to an external server.
- The seller claims the dataset contains 13.73 million records, including 4.82 million unique entries.
- The post alleges injection flaws were used to gain command execution and persistent access.
- A 10,000-record sample was reportedly posted, but the article says no field list was provided.
- The data-sale and access claims remain unverified.
Article Details
- Victim Organization
- Bureau Vallée
- Victim Domain
- bureau-vallee.fr
- Incident Type
- Alleged customer-data theft involving a third-party supplier; the seller claims injection flaws enabled command execution and persistent access.
- Affected Records
- The seller claims the dataset contains 13.73 million records, including 4.82 million unique entries. A 10,000-record sample was reportedly posted; the claim is unverified.
- Operational Impact
- The seller claims to have gained command execution and persistent access to the supplier's environment. No confirmed operational disruption is reported.
- Ransom Or Extortion
- A forum user claims to be selling the allegedly obtained customer data. The claim is unverified.
- Claim Status
- claimed