Data Leakage of Auchan and Your House Retail Chains

Data Leakage & Breach Intelligence (DLBI) Reports

Information security specialists of Data Leakage & Breach Intelligence (DLBI) reported that databases with information about clients of Auchan and Your House retail chains have been published on the network. The data of 7.8 million Auchan customers and about 700,000 customers of Your House hypermarkets got into the public domain.
According to the researchers, the information was leaked by the same attackers who previously published the dumps of SberSpasibo, SberPrava, SberLogistics, GeekBrains, and so on.
At the same time, the attackers promise to publish the data of another 12 unnamed large companies in the near future.
Auchan data are presented in text files containing 7,840,297 lines, including first name and last name, telephone numbers (7.7 million unique numbers), email addresses (4.7 million unique addresses), delivery or pickup address (777,000 addresses), and date of creation and updating of the record (from April 13, 2020 to May 18, 2023).
“Your Home” data is published as a user table dump from CMS Bitrix. In total, the leak contains 713,365 lines, including first name/surname, telephone numbers (618,300 unique numbers), email addresses (389,500 unique addresses), hashed (with salt) password, gender (not for everyone), date of birth (not for everyone), and date of creation and update of the record (from January 21, 2019 to May 18, 2023).

Auchan Retail Chain Confirms Data Leakage

The Auchan retail chain has already confirmed information about the data leakage of its customers. The company is conducting an internal investigation.
“The Information Security Service of Auchan Retail Russia has confirmed the data leakage of the trading network customers. We are currently conducting an internal investigation to determine the attack vector and the source of the leak. We regret what happened and apologize to our customers,” the retailer’s press service reports.
The company added that they are taking all necessary measures to strengthen the means of protecting the company’s information systems and protecting customer data.
Data Leakage & Breach Intelligence (DLBI) recently reported that databases containing information about customers of Auchan and Your House retail chains have been leaked on the internet. The data of 7.8 million Auchan customers and about 700,000 customers of Your House hypermarkets were exposed.
The attackers responsible for the leak are the same ones who previously published the dumps of SberSpasibo, SberPrava, SberLogistics, GeekBrains, and more. They have also promised to publish the data of another 12 unnamed large companies in the near future.
Auchan data was presented in text files containing 7,840,297 lines, including first name and last name, telephone numbers (7.7 million unique numbers), email addresses (4.7 million unique addresses), delivery or pickup address (777,000 addresses), and date of creation and updating of the record (from April 13, 2020 to May 18, 2023).
The “Your Home” data was published as a user table dump from CMS Bitrix. In total, the leak contained 713,365 lines, including first name/surname, telephone numbers (618,300 unique numbers), email addresses (389,500 unique addresses), hashed (with salt) password, gender (not for everyone), date of birth (not for everyone), and date of creation and update of the record (from January 21, 2019 to May 18, 2023).
The Auchan retail chain has already confirmed the data leakage of its customers. The company is currently conducting an internal investigation to determine the attack vector and the source of the leak. They have also expressed their regret and apologized to their customers.
The company has also stated that they are taking all necessary measures to strengthen the means of protecting the company’s information systems and protecting customer data. They are also working to identify the source of the leak and the attack vector.
Data breaches are becoming increasingly common, and it is important for companies to take the necessary steps to protect their customers’ data. Companies should ensure that their systems are secure and that customer data is encrypted. They should also have a plan in place to respond to data breaches quickly and effectively.
It is also important for customers to be aware of the risks associated with data breaches and to take steps to protect their personal information. Customers should be careful when sharing their personal information online and should use strong passwords and two-factor authentication when possible.
Data breaches can have serious consequences for both companies and customers. Companies should take the necessary steps to protect their customers’ data and to respond quickly and effectively to data breaches. Customers should also be aware of the risks associated with data breaches and take steps to protect their personal information.