ShopTaPlace Breach: 16,806 French User Records Are on the Dark Web

HEROIC discovered 16,806 records in ShopTaPlace on January 19, 2025, leaking email addresses, phone numbers, first names, and gender fields lifted from the French cultural ticketing app's user database.

Why This ShopTaPlace Breach Is Dangerous Right Now

Even without passwords, this leak is a ready-made phishing kit. Attackers now have a curated list of French app users complete with contact details and gender, perfect fuel for targeted SMS scams impersonating event organizers, refund requests, or anti-waste ticketing promotions.

What Was Exposed in ShopTaPlace

• Email addresses tied to active ShopTaPlace accounts
• Phone numbers usable for smishing and voice phishing campaigns
• First names for personalized lure messaging
• Gender, useful for demographic targeting in scam copy

Why This Matters

Mid-size consumer apps are prime targets because their user bases are loyal and highly identifiable. A leak of 16,806 French ticketing users may sound small, but in the hands of a scam operator it becomes a precision phishing campaign with very high open rates.

How Database Breaches of Niche Apps Unfold

Smaller apps often rely on shared hosting, unpatched API endpoints, or leaky admin panels. Once an attacker finds a weak point, they siphon the full user table and post it on low-tier dark web forums where social engineering crews buy targeted lists. The ShopTaPlace records follow that exact pattern.

Check If You Are Affected

HEROIC scans more than 400 billion compromised records across the surface, deep, and dark web. Run your email through the HEROIC exposure scanner to see if your ShopTaPlace account data was leaked, then watch for unexpected SMS and email targeting your event habits.