Bureau Vallée: 4.8 million customers claimed, a second incident in 12 days
A hacker claims 4,819,927 records at Bureau Vallée on August 21,
2026 — a second, separate incident in twelve days, after an August 9
leak of 55,949 records. Not confirmed by the retailer.
⚠️ Two separate claims, no public confirmation.
Bureau Vallée already had a claimed leak on August 9, 2026 (55,949 records, hacker
ZeroBytes). This new claim from August 21, by a different hacker, covers a volume nearly
100 times larger — with no established link between the two incidents, and no
confirmation from the retailer for either.
The numbers
13.7M
Raw rows claimed on August 21, 2026 by the hacker "misere."
Claim reported, not confirmed by Bureau Vallée.
4.82M
Unique records after deduplication, mixing individual and business
customers.
Claim reported, unconfirmed.
55,949
Records from a separate, earlier incident, claimed on August 9 by
hacker ZeroBytes (21,921 people) — not to be confused with this one.
Cyberattaque.org, FrenchBreaches, August 9, 2026.
2023-2026
Period covered by dates associated with the claimed records from
August 21.
Sample published by the hacker.
Timeline
1ST INCIDENT — CLAIMED
August 9, 2026
Hacker ZeroBytes claims access to a bureau-vallee.fr API, with
extraction of 55,949 records representing 21,921 distinct individuals. API access was
reportedly identified on July 7, extraction voluntarily halted the next day due to
slow service response.
2ND INCIDENT — CLAIMED
August 21, 2026
A different hacker, using the alias "misere," claims a second
incident with no established link to the first: 13.7 million raw rows, 4,819,927
unique records after deduplication, including customer identifiers, names, business
names, addresses, emails, phone numbers, SIRET numbers and store codes.
UNCONFIRMED
Since
No public confirmation from Bureau Vallée has been identified for
either incident to date.
🔁Two incidents, don't mix them up
This case file illustrates a tracking pitfall: the same retailer can be the subject
of two separate claims within two weeks, with volumes differing by a factor of 100
(55,949 versus 4.8 million). Conflating the two — or assuming they're linked — would
give a false picture of the situation. Each claim must be assessed separately, with its
own date, its own hacker, and its own level of verification.
What it changes for you
If you are or were a Bureau Vallée customer (individual or business), your contact
details and account information could be in either of these files — pending confirmation.
The main risk is an email or call citing your account number or usual store to appear
legitimate. See From Leak to Scam.
🔒 If you manage office-supply purchasing for a business client
of Bureau Vallée, be especially wary of wire-transfer fraud attempts relying on a real
SIRET number or order reference.
Frequently asked questions
Was there one or two leaks at Bureau Vallée?
Two, separate: 55,949 records on August 9 (ZeroBytes), 4.8 million on August 21
(misere).
Is this leak confirmed?
No, neither claim has public confirmation from Bureau Vallée to our
knowledge.
What data is claimed in the August 21 leak?
Customer identifiers, names, business names, addresses, emails, phone numbers,
SIRET, store codes.
📌 Last checked: August 21, 2026. Verifiable
information to report: contact@egidio.app.
Cite this pageEgidio — The Threat Laboratory, "Bureau Vallée: 4.8 million customers claimed, a second incident in 12 days," egidio.app/en/laboratoire/bureau-vallee-4-8-million-claim/. Licensed CC BY 4.0.
Free to reuse, including commercially, with attribution. Reuse terms.