Inside the LDLC Database: How 1,463,278 Customers Were Stolen

HEROIC found the LDLC database breach dated February 28, 2024, exposing 1,463,278 records including email addresses, first and last names, and phone numbers from ldlc.com, a major French electronics retailer.

Why the LDLC Breach Is Dangerous

Retailers hold customer data that criminals use for targeted fraud. With full names, email addresses, and phone numbers, attackers can craft convincing phishing emails impersonating LDLC, launch SMS scams referencing real orders, or use the phone numbers for SIM-swap attacks to take over accounts secured by SMS-based two-factor authentication.

What Was Exposed in the LDLC Leak

• Email Address
• First Name
• Last Name
• Phone Number

Why This LDLC Data Puts You at Risk

Even without passwords, your full name and phone number are enough to bypass identity verification at many financial institutions and attempt account recovery on other platforms. Phone numbers can be used to redirect two-factor authentication codes to attackers, granting access to email, banking, and shopping accounts. LDLC customers should be alert to suspicious messages referencing their orders or account.

How Database Breaches Work

Database breaches occur when attackers exploit vulnerabilities in a website or application to gain unauthorized access to the underlying database. Once inside, they extract stored records in bulk, including personal identifiers and contact information. The stolen records are then sold or posted publicly on criminal forums.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, covering more than 400 billion leaked records. Use HEROIC's free breach scanner to check if your email address or credentials appeared in the LDLC leak or thousands of other breaches in our database.