The French mass distribution brand was reportedly the victim of a cyberattack this weekend. The hacker behind the intrusion is believed to have the personal information of some 13 million customers.
After a year 2024 full of “incidents”, hacks of French companies continue in 2025! At the beginning of January, two brands specializing in the sale of ready-to-wear clothing, Kiabi and Showroomprivé, were victims of cyberattacks resulting in the theft of several personal information of their respective customers. It is now Carrefour’s turn to be the target of hackers.
Indeed, the mass distribution giant was allegedly attacked during the weekend of January 18 and 19. According to an Internet user knowledgeable on the subject, “a (new) cybercriminal has put up for sale a database supposedly belonging to Carrefour containing 13,000,000 lines.” In his message posted onhe specifies that “the entire database would be for sale” on the BearchForums site, considered the hacker’s Amazon.
Carrefour hack: millions of personal data for sale on the Dark Web
Among the millions of hacked data items are personal information such as customers’ first name, last name, full postal address and telephone number. As well as the email address, date of birth or even shopping cart information. Data put on sale at an unknown price, since the hacker did not specify a purchase amount. Simply, the means of transaction to be made in BTC (Bitcoin), XMR (Monero) or LTC (LiteCoin) cryptocurrencies.
For now, there is no indication whether this hack is real or not. The Internet user who reported the facts presented also specified this in his tweet: “No certainty about the veracity of this database and therefore of the cyberattack on Carrefour.” However, caution remains for all customers of the French brand.
Therefore, faced with a potential threat, it is necessary to remember that means exist to protect against piracy. The whistleblower gives some of them:
- Change your Carrefour password if you have an account
- Use a password manager (like Proton Pass)
- Avoid clicking on links received by SMS or email if you are unsure of the veracity of the message
- Alert those around you (parents, grandparents, etc.)