PortaleCo
ModerateReportedRetail
On 20 October 2026, a threat actor claimed to have published a database of about 103,000 records attributed to customers of PortaleCo, a French online retailer of aluminium gates and outdoor equipment. The sample shown contains numeric identifiers, first and last names, postal addresses, postcodes, cities and countries. The actor mentions an IDOR-type flaw. The stated volume is a claim and does not prove that 103,000 distinct people are affected, and the authenticity of the database is unconfirmed. The sample contains no email address, phone number, password or bank data.
A third party can link a name to a precise postal address, which allows locating a home or delivery address and preparing targeted fraudulent mail or solicitations.
- Disclosed on
- October 20, 2026
- Incident dated
- October 20, 2026
- Sector
- Retail
- Country
- France
- Cause
- Undisclosed
Exposed data
- Full name
- Postal address
- Customer ID
You are only affected if you had an account or an order with this organisation.
What you can do
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact