FranceE-commerceCustomer & Payment DataPlaintext Passwords ClaimedUnverifiedHomeMaison Data Sale Claim Lists 36.4 Million Records, 1.6M Emails and 330K Plaintext Passwords
Overview
An actor using the handle “Chimera” claims to be selling a database associated with HomeMaison, a French online retailer specializing in home decoration and furniture.
The post advertises 36,418,034 lines extracted from 2008 to 2026, including approximately 1.6 million email addresses and 1.3 million phone numbers. The actor claims the archive contains 471 files totaling 10.4 GB in CSV and JSONL formats, and separately claims that about 330,000 customer passwords are stored in plaintext. The dataset, its source, the stated counts, plaintext-password claim and current availability have not been independently verified.
Post details
FranceWhat the post claims
- 36,418,034 total lines
- Approximately 1.6 million email addresses
- Approximately 1.3 million phone numbers
- 471 files
- 10.4 GB archive
- CSV and JSONL formats
- Data spanning 2008–2026
- Approximately 330K plaintext passwords claimed
- Customer records included
- Address and delivery records included
- Order records included
- Payment records included
- Shipment records included
- Invoice / billing plugin records included
- Customer comments included
- Completed and declined payment records included
- 2,000 samples advertised
- Price listed as make offer
- XMR payment requested; escrow accepted
The visible samples include direct customer identity, contact, address, order, payment, shipment and authentication-related fields. Those individual values, passwords, card data, payment tokens, IP addresses and invoice/payment details are not transcribed in this report.
Screenshots
IOCs & identifiers
Identifiers directly visible or supported by the supplied material. These support correlation and do not independently verify the dataset claim.
| Type | Identifier | Source |
|---|---|---|
| Actor handle | Chimera |
Screenshots 1–3 |
| Telegram | @chimeradbs |
Screenshot 3 |
| XMPP | chimeraz@xmpp.is |
Screenshot 3 |
| Named organization domain | homemaison[.]com |
Screenshots 1–3 |
The organization domain identifies the entity named in the claim, not malicious infrastructure. Individual customer emails, phone numbers, addresses, payment tokens, card values, IP addresses and passwords shown in the source material are intentionally not reproduced here.
Mapped techniques
Inferred identifies an analytical mapping supported by the supplied material; it does not mean the activity has been independently verified.
- CollectionT1213.006Data from Information Repositories: DatabasesInferredThe listing presents a large collection of structured CSV/JSONL customer, order, payment and transaction datasets. The supplied material does not disclose how the data was obtained or independently establish unauthorized access to HomeMaison systems.
Potential impact
If authentic, the claimed dataset could expose customer names, email addresses, phone numbers, postal addresses, order history, shipment information, billing/payment metadata and account credentials. The separate claim that hundreds of thousands of passwords are stored in plaintext would materially increase the risk of credential reuse, account takeover and targeted fraud if accurate.
Status Unverified
Dark Web Informer has not independently verified the dataset’s authenticity, source, completeness, 36,418,034-line count, email or phone totals, 10.4 GB archive size, 330K plaintext-password claim, sample contents or current availability. The supplied screenshots document the listing and visible samples, not independent confirmation of the underlying data.
Source: Dark Web Informer · 2026-11-12