---
title: "Data breach at Armurerie Douillet-Dreumont"
description: "The firearms retailer Douillet-Dreumont, which operates shops in Pluméliau-Bieuzy and Vannes (Morbihan, France), is the subject of a cyberattack claim published on 6 October 2026. The claimant says they hold 4.65 GB of data, i.e. 7,546 files, and are offering it for sale. The files are mostly PDFs a"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-10-06-armurerie-douillet-dreumont
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-10-06
dateModified: 2026-10-06
---
# Armurerie Douillet-Dreumont

Data breach — Critical

The firearms retailer Douillet-Dreumont, which operates shops in Pluméliau-Bieuzy and Vannes (Morbihan, France), is the subject of a cyberattack claim published on 6 October 2026. The claimant says they hold 4.65 GB of data, i.e. 7,546 files, and are offering it for sale. The files are mostly PDFs and images: about 1,900 FFTir licences or SIA-related documents, 1,200 identity cards, nearly 700 prefectural firearm-possession decisions, about 200 passports and about 300 proofs of address, bank details or payment-card documents. The number of files does not equal the number of people, which is unknown, and the organisation has not confirmed the incident so far.

The described prefectural decisions can link a person's name, date and place of birth, full address and SIA number to their status as a firearm holder, exposing them to identity theft, fraud and physical targeting of their home.

| Fact | Value |
| --- | --- |
| Disclosed on | October 6, 2026 |
| Sector | Retail |
| Country | France |
| Cause | Undisclosed |
| Severity | Critical |
| Status | Reported |

## Exposed data

- Identity document
- Full name
- Postal address
- Date of birth
- Customer ID
- Banking data (IBAN, card)
- Other personal data

## What you can do

- Watch your statements. On any unknown debit, block the card and request a refund — French law (art. L133-18) entitles you to it.
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Armurerie Douillet : 7 546 documents en fuite, des détenteurs d’armes identifiables avec leur adresse](https://www.cyberattaque.org/cyberattaque-armurerie-douillet-7-546-documents-en-fuite-des-detenteurs-darmes-identifiables-avec-leur-adresse/) — Cyberattaque.org

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-10-06-armurerie-douillet-dreumont
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees