Ex&Co (réseau Expert / Connexion)
ModerateReportedRetail
On 11 September 2026, an attacker claimed on a cybercrime forum to have leaked a file presented as coming from Boulanger.com, though sample analysis indicates it actually corresponds to after-sales service records from around fifty independent stores in the Ex&Co network (Expert and Connexion brands), in which Boulanger has held a stake since 2018. The file reportedly contains about 132,000 repair and warranty records covering roughly 61,000 distinct customers, opened between 2010 and September 2026, mainly in Meurthe-et-Moselle, Ardèche and Lot.
The precise link between contact details, the actual appliance purchased and the reported fault makes it easier to run fraudulent after-sales-service scams that appear legitimate.
- Disclosed on
- September 11, 2026
- Accounts affected
- 61,000
- Sector
- Retail
- Country
- France
- Cause
- Undisclosed
Exposed data
- Full name
- Postal address
- Phone number
- Email address
- Order history
- Customer ID
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
- Boulanger / Ex&Co : fuite revendiquée visant 61 275 clients du SAVFuites Infos
- Cybersécurité : Boulanger victime d'une fuite de données, des millions de Français concernésUsine Digitale
- Boulanger touché par une revendication de cyberattaque impliquant 132 000 dossiers SAVCyberattaque.org
- Boulanger : un pirate revendique la fuite de 132 000 dossiers clients liés au SAVFrenchBreaches
- Fuite de données Boulanger : informations et protectionHG Info & Co
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact