---
title: "Data breach at Celinni"
description: "On September 26, 2026, a cybercriminal group claimed to have breached the website of Celinni, a Paris-based jeweler specializing in certified diamonds and jewelry. The claim concerns roughly 12,000 customers, with names, email addresses, phone numbers, postal addresses, customer accounts, order hist"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-26-celinni
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-26
dateModified: 2026-09-26
---
# Celinni

Data breach — Critical

On September 26, 2026, a cybercriminal group claimed to have breached the website of Celinni, a Paris-based jeweler specializing in certified diamonds and jewelry. The claim concerns roughly 12,000 customers, with names, email addresses, phone numbers, postal addresses, customer accounts, order histories, invoices and identity documents; supplier business data was reportedly also taken. Celinni confirmed an intrusion by disabling a compromised login and migrating its transactional emails, three days after a phishing message impersonating the French health insurance agency was sent from a @celinni.com address.

Combining an identity, postal address and high-value jewelry purchase history makes it possible to identify households owning valuable gems, while the exposed identity documents could facilitate identity theft.

| Fact | Value |
| --- | --- |
| Disclosed on | September 26, 2026 |
| Incident dated | September 23, 2026 |
| Accounts affected | 12,000 |
| Sector | Retail |
| Country | France |
| Cause | Credential stuffing |
| Severity | Critical |
| Status | Confirmed |

## Exposed data

- Full name
- Email address
- Phone number
- Postal address
- Customer ID
- Order history
- Identity document

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Celinni](https://frenchbreaches.com/alertes/celinni-muim3c0lnes4szg970p) — FrenchBreaches
- [Celinni : fuite de données revendiquée, trois jours après un hameçonnage parti de sa boutique](https://fuitesinfos.fr/article/2026-09-26-celinni) — Fuites Infos
- [Celinni : les propriétaires de bijoux exposés après une cyberattaque](https://www.cyberattaque.org/celinni-les-proprietaires-de-bijoux-exposes-apres-une-cyberattaque/) — Cyberattaque.org

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-26-celinni
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees