Skip to content
Caverne des Jouets
France1 source
Claimed:Claimed on a ransomware leak site on 7 Nov 2026. Not confirmed by the organisation, so treat it as a claim, not a fact.
Hacker claims 969,400 Caverne des Jouets customer records
A hacker claims to be selling personal information of customers of the French online toy retailer, including names, first names, purchase histories and hashed passwords, affecting 969,400 people. The claim is dated 7 November.
- Type
- Data breach
- Sector
- Retail
- Records
- 969.4K records claimed
- First reported
- 7 Nov 2026
- Latest source
- 7 Nov 2026
What to do
- This is only a claim by the attackers so far. Do not panic, but do the basics:
- If you have an account, change that password, and anywhere you reused it.
- Turn on two-factor authentication, ideally an authenticator app or passkey, not SMS.
- Treat this as unverified. Ask the organisation directly before acting on it.
- If this is a vendor of yours, ask what of your data they held and whether it was in scope.
- Reset any API keys, SSO trusts or shared credentials you have with them.
Not sure? Ask an assistant with the sources attached, or have a coding agent check your systems.
Check your systems for Caverne des Jouets
Sources
1Confidence 45% that this is real and correctly placed. Locations are city centroids at best. Spotted an error? Report a correction.