---
title: "Data breach at Diamant Factory (diamantfactory.fr)"
description: "An attacker using the alias Cybernox claims to have obtained a database attributed to jeweler Diamant Factory (stores in Monaco and Aix-en-Provence) and has been offering it for sale since September 19, 2026. The claimed 24,094 rows, spanning more than ten years of activity, correspond to order and "
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-19-diamant-factory-diamantfactory-fr
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-19
dateModified: 2026-09-19
---
# Diamant Factory (diamantfactory.fr)

Data breach — Moderate

An attacker using the alias Cybernox claims to have obtained a database attributed to jeweler Diamant Factory (stores in Monaco and Aix-en-Provence) and has been offering it for sale since September 19, 2026. The claimed 24,094 rows, spanning more than ten years of activity, correspond to order and after-sales service records: customer names and phone numbers, detailed jewelry descriptions (characteristics, weight, values sometimes estimated at tens of thousands of euros) and intervention histories. The attacker claims to have exploited an IDOR flaw; neither the company nor the French data protection authority has confirmed the incident so far.

Linking a client's identity to the precise value of jewelry they ordered makes it easier to target them with fraud or social-engineering attempts aimed at identified high-net-worth customers.

| Fact | Value |
| --- | --- |
| Disclosed on | September 19, 2026 |
| Sector | Retail |
| Country | MC |
| Cause | Misconfigured database |
| Severity | Moderate |
| Status | Reported |

## Exposed data

- Full name
- Phone number
- Order history
- Other personal data

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Diamonds Factory](https://frenchbreaches.com/alertes/diamonds-factory-mu8elc69ehzc7qh8dpn) — FrenchBreaches
- [Diamonds Factory : 24 000 dossiers clients revendiqués après une cyberattaque](https://www.cyberattaque.org/diamonds-factory-24-000-commandes-clients-revendiques-apres-une-cyberattaque/) — Cyberattaque.org
- [Diamant Factory : fuite de données revendiquée sur 24 094 lignes de commandes](https://fuitesinfos.fr/article/2026-09-19-diamant-factory) — Fuites Infos
- [Cybernox multiplie les revendications de fuites en France](https://www.zataz.com/cybernox-multiplie-les-revendications-de-fuites-en-france/) — ZATAZ
- [Diamant Factory victime d'un piratage : 24 094 lignes de données...](https://frenchbreaches.com/alertes/diamant-factory-mu8elc69ehzc7qh8dpn) — FrenchBreaches

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-19-diamant-factory-diamantfactory-fr
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees