Armurerie Douillet-Dreumont
CriticalReportedRetail
The firearms retailer Douillet-Dreumont, which operates shops in Pluméliau-Bieuzy and Vannes (Morbihan, France), is the subject of a cyberattack claim published on 6 October 2026. The claimant says they hold 4.65 GB of data, i.e. 7,546 files, and are offering it for sale. The files are mostly PDFs and images: about 1,900 FFTir licences or SIA-related documents, 1,200 identity cards, nearly 700 prefectural firearm-possession decisions, about 200 passports and about 300 proofs of address, bank details or payment-card documents. The number of files does not equal the number of people, which is unknown, and the organisation has not confirmed the incident so far.
The described prefectural decisions can link a person's name, date and place of birth, full address and SIA number to their status as a firearm holder, exposing them to identity theft, fraud and physical targeting of their home.
- Disclosed on
- October 6, 2026
- Sector
- Retail
- Country
- France
- Cause
- Undisclosed
Exposed data
- Identity document
- Full name
- Postal address
- Date of birth
- Customer ID
- Banking data (IBAN, card)
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- Watch your statements. On any unknown debit, block the card and request a refund — French law (art. L133-18) entitles you to it.
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact