Leak at Cybertek

On 12 September 2024, Cybertek — a French computer-hardware and electronics retailer — notified customers of a security incident that had exposed personal data, joining a wave of breaches affecting major French retailers that month.

The leak did not result from a direct intrusion into Cybertek's own systems but from a compromised shared IT service provider used by several retailers. The same threat actor — operating under the pseudonym horrormar44 / Horror404x and selling the stolen data on the Breached forum — was tied by researchers to parallel breaches at Boulanger, Cultura, Truffaut and Cybertek's sister brand Grosbill, indicating a coordinated supply-chain campaign.

Exposed data was limited to contact details:

• First and last name
• Email address
• Postal address
• Phone number

Cybertek stated that passwords and banking/payment information were not compromised. The company did not publish a precise figure for affected Cybertek customers (its sister brand Grosbill reported roughly 680,000 records); it said it had taken the necessary measures, resolved the incident, and that its website remained secure and fully operational.