Situation — Attack, leak or dispute

Our client list has been published for free on a hacker forum.

Context

A client, a journalist or an alert website tells you: your client list is circulating on a hacker forum. Names, emails, phone numbers, freely available.

You don't know how it got out, or since when.

The problem

  • With a name, an email and a phone number, a fraudster can write to your clients pretending to be you.
  • Until the entry point is found, the leak can happen again.
  • You must decide quickly what to report to the CNIL (French data protection authority) and what to tell your clients.

Case study

Real-life caseOctober 2026

King Jouet, toy retailer, France

On 20 October 2026, a hacker posted a database attributed to the website of King Jouet, a French toy retailer, on a cybercrime forum, free of charge.

It held 195,714 customer records: names, emails, phone numbers and towns. The file contained no passwords and no bank details.

The retailer traced the source to an old, disabled component of its website, and said it would notify the CNIL. Another attack had been claimed in February 2025; the source does not formally link the two.

Read the sourceKing Jouet: data of nearly 196,000 customers published on a forum — FrenchBreaches (opens in a new tab)

Why us?

  • We find how the file got out, including through an old, forgotten component.
  • We close that door and look for any others.
  • We prepare your notification to the CNIL and keep the evidence for your insurer.
  • Attack in progress? Email contact@orbitalmz.com with the subject "Attack in progress": these messages are read first.

Contact us

Talk to an expert

A free 30-minute video call with one of our experts, then your free quote, with no commitment.

Take the diagnostic

A few questions, the first already answered for your situation: your answers help us prepare the video call. Free, no sign-up, about 2 minutes.

Take the diagnostic