Store pas cher Data Breach
The 2023 Store pas cher data breach occurred in May 2023 when the customer database of French window covering, blinds, and shutters online retailer Store pas cher (storepascher.com) was compromised and published on cybercrime forums.
Exposed Data Types
6- Email addresses
- Names
- Passwords
- Dates of birth
- IP addresses
- Website activity
About This Breach
What information was affected in the Store pas cher incident?
The extracted PrestaShop customer database dump (storepascher.com.sql) contained customer profiles and transaction records. Compromised records for 40,642 unique customers encompass:
- Personal & Identity Information: Full customer first and last names.
- Contact Credentials: Canonical email addresses.
- Authentication Data: Passwords hashed using MD5.
- Demographic Records: Customer dates of birth.
- Network & Connection Logs: Registration and last connection IP addresses.
- Account Metadata: Account creation timestamps, last login records, and newsletter subscription statuses.
How many accounts were affected?
Rigorous RFC canonical parsing and deduplication confirmed 40,642 unique valid email addresses.
Technical analysis and security risks
The dump originated from a PrestaShop retail e-commerce deployment. The use of unsalted MD5 hashes makes password recovery trivial via modern GPU cracking clusters, exposing customers to credential stuffing across other online services.
Recommended actions for affected users
Customers who registered with Store pas cher should:
- Immediately update passwords on other platforms where identical credentials were used.
- Enable two-factor authentication (2FA) wherever available.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
