Allobébé and Made in Bébé: over 2 million parents and parents-to-be claimed
Two French baby-products retailers, Allobébé and Made in Bébé, face separate
claims by different hackers on the same day, totaling over 2.1 million customer
accounts. Not confirmed by either company.
⚠️ Two separate claims, same day, no confirmation.
Made in Bébé and Allobébé are the subject of separate claims by different hackers,
published on August 21, 2026. Neither company has publicly confirmed the incident to our
knowledge. This case file covers both together because they hit the same sector and raise
the same underlying question: does data tied to parenthood and early childhood deserve
separate treatment?
The numbers
960,106
People claimed at Made in Bébé (1.36 million rows), by the hacker
"ChimeraZ."
Claim reported, not confirmed by Made in Bébé.
1,136,058
People claimed at Allobébé (2.18 million rows), data covering
2006-2026.
Claim reported, not confirmed by Allobébé.
2.1M
Combined total of people claimed across both retailers, on the same
day.
Sum of the two separate claims.
2019
Year of an earlier, separate leak at Allobébé (over one million
customers, database sold for €520) — a third episode, unrelated to the 2026 one.
ZATAZ, 2019.
Timeline
CLAIMED — MADE IN BÉBÉ
August 21, 2026
The hacker "ChimeraZ" publishes a 1.45GB JSON file presented as
coming from Made in Bébé: 1.36 million rows, 960,106 people claimed. Data shown: names,
billing and shipping addresses, order numbers and dates, products purchased,
quantities and prices, payment-method information, taxes and shipping fees, total
amounts.
CLAIMED — ALLOBÉBÉ
August 21, 2026
An unidentified hacker publishes a separate claim concerning
Allobébé: 2.18 million rows, 1,136,058 people claimed, with data dating back to 2006.
Data shown: names, emails, phone numbers, postal addresses, products ordered and
prices, payment methods used.
UNCONFIRMED
Since
No public confirmation from either Made in Bébé or Allobébé has
been identified to date for these two 2026 claims. Banking-data presence is not
demonstrated by either sample shown.
👶What a baby-products order history reveals
The claimed files don't contain a record named after a child — these are customer
accounts belonging to parents or parents-to-be. But the purchase history at a
baby-products retailer almost mechanically reveals the existence of a pregnancy or a
young child, an approximate age range based on the products bought, and sometimes a
first name if personalized items were ordered. That's indirect data, but its sensitivity
far exceeds a simple address or email: it reveals an intimate family situation, at a
moment when parents are particularly targeted by commercial offers and therefore less
wary of a message that seems relevant.
What it changes for you
If you ordered from Allobébé or Made in Bébé — including several years back for
Allobébé — your name, contact details and baby-products purchase history could be in one
of these files, pending confirmation. The main risk is a message posing as the retailer,
citing a real order or a specific baby product, to appear credible before asking for
payment or banking details. See
From Leak to Scam.
🔒 A message citing a real baby-products order doesn't prove it
comes from the retailer — always verify through the official site or a known phone number
before sharing banking information, especially if the message plays on urgency tied to a
child (delivery, product safety).
Frequently asked questions
Are these two leaks confirmed?
No, neither is: two separate claims from the same day, by different hackers, with no
confirmation from either company.
Is children's data affected?
The claimed accounts belong to parents, not files named after children — but the
purchase history indirectly reveals their existence.
What is the combined scale of the two claims?
Roughly 2.1 million people total: 960,106 at Made in Bébé, 1,136,058 at Allobébé.
📌 Last checked: August 21, 2026. Verifiable
information to report: contact@egidio.app.
Cite this pageEgidio — The Threat Laboratory, "Allobébé and Made in Bébé: over 2 million parents and parents-to-be claimed," egidio.app/en/laboratoire/allobebe-made-in-bebe-parents-children-breach/. Licensed CC BY 4.0.
Free to reuse, including commercially, with attribution. Reuse terms.