Backpower
ModerateConfirmedRetail
On September 23, 2026, an actor using the alias Quantique claimed to have compromised the infrastructure of Backpower, a French battery refurbishing company (formerly VeloBatterie), and extracted its PrestaShop database, reportedly around 47 million rows across 633 tables. The sample released by the attacker shows order data (customer IDs, billing, shipping), phone call records (caller and callee numbers), and named customer reviews. Backpower has notified its customers of the incident. The 47 million figure refers to database rows, not individuals, and the number of people affected remains unknown at this stage.
Order and phone call data tied to real customer identifiers could be used to craft highly credible phishing messages, particularly if the claimed access to the company's email system is confirmed.
- Disclosed on
- September 23, 2026
- Sector
- Retail
- Country
- France
- Cause
- Credential stuffing
Exposed data
- Order history
- Phone number
- Full name
- Postal address
- Customer ID
- Employment data
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact