Auchan Optique: more than 218,000 customers leaked after a cyberattack

On 22 May 2026, Auchan Optique — the eyewear and vision-care retail brand of France's Auchan group — was named in a wave of data leaks targeting French opticians, with a database of its customers offered for sale on a cybercrime forum.

The listing, attributed to a threat actor using the handle Angel_Batista (previously linked to the sale of other French optical-sector databases), claimed to contain the records of 218,824 customers. The leak surfaced within a 48-hour window alongside near-simultaneous listings for Atol, Jimmy Fairly and Optic 2000, leading researchers to suspect that a shared technical/IT provider common to these chains was compromised rather than each retailer being breached individually.

Data categories advertised in the dataset include:

• Customer identifiers and account data
• Titles, first and last names
• Dates of birth
• Postal addresses
• Phone numbers and contact details
• Internal administrative references

The combination of full contact details and personal identifiers makes affected customers prime targets for phishing, phone-based scams and identity theft. As of disclosure, the full authenticity of the claimed database had not been officially confirmed, and Auchan Optique had not published a detailed statement; the incident remains ongoing.