Frenchie

We noticed the emergence of a substantial dataset circulating on a prominent hacking forum, originating from the Greek e-commerce platform, Frenchie.gr. The leak, which occurred on April 16, 2025, and was discovered in August 2025, encompasses a significant volume of user information. What struck us immediately was the inclusion of personally identifiable information (PII) alongside authentication credentials, presenting a dual threat vector for compromised accounts and potential identity theft. The platform's niche focus on French fashion suggests a potentially targeted user base, which could be of interest to specific threat actors.

The breach, classified as a database compromise, exposed approximately 256,000 records. The leaked data types include email addresses, first and last names, IP addresses, birthdays, and MD5 hashed passwords. The source structure indicates a direct dump of user account information, likely from a relational database. The dataset was made available on a well-known underground forum, increasing its accessibility to malicious actors. The use of MD5 hashing for passwords, a known weak cryptographic algorithm, is particularly concerning, as these hashes are susceptible to brute-force attacks and rainbow table lookups, effectively rendering them as plain text for many common passwords.

While specific news coverage directly linking this incident to Frenchie.gr in major outlets has not yet surfaced, the presence of the data on a public hacking forum indicates a significant event within the cybercrime ecosystem. Similar breaches of e-commerce platforms are unfortunately common, often leading to credential stuffing attacks against other online services where users may have reused their passwords. Further OSINT investigation into the specific forum where the data was posted may reveal discussions or sales related to this dataset, potentially providing insights into the threat actors' motivations and subsequent activities.