5,924,215 Atol customer records: claimed data leak

On 22 May 2026, Atol — a French cooperative of opticians ("Atol Mon Opticien") founded in 1970 with more than 800 stores across France — became the subject of a large claimed data leak. A threat actor using the handle Angel_Batista posted a database for sale on a cybercrime forum, advertising the personal records of 5,924,215 Atol customers and pricing the full set at around €8,000.

According to sample data shown by the seller, the exposed records included:

• Titles, first and last names (and birth names)
• Dates of birth
• Full postal addresses
• Email addresses (reportedly around 1.6 million unique addresses)
• Phone numbers

The intrusion vector has not been confirmed. The leak surfaced within a 48-hour window (22–24 May 2026) alongside claimed breaches at other French eyewear brands — Auchan Optique, Jimmy Fairly and Optic 2000 — leading observers to suspect a shared technical service provider may have been compromised, a pattern previously seen in the sector. That theory remains unverified.

As of reporting, the figures are an attacker's claim circulated on criminal forums and had not been independently authenticated, and Atol had not publicly confirmed the breach. The status remains unknown.