Leak at Grain de Malice (via Socloz)

On 13 February 2026, Grain de Malice — a French womenswear chain belonging to the Beaumanoir group — was named among the brands affected by a large-scale breach of Socloz, the omnichannel retail platform it uses for stock management and click-and-collect / ship-from-store reservations.

The incident was a supply-chain compromise: the threat actor group DumpSec claimed to have stolen a dataset of up to roughly 31 million records from Socloz's platform, affecting customers of more than 150 retail brands across France and Europe. Because the data sits with the shared provider, Grain de Malice did not need to be breached directly for its customers' details to be exposed.

For Grain de Malice customers, the leaked fields seen in samples include:

• Last name and first name
• Email address
• Phone number

The dataset, also containing reservation and order details, was being offered for sale on a hacker forum (BreachForums) rather than released as a full public dump. As of the disclosure, neither Socloz nor the affected brands had issued a public statement, and the incident remained ongoing with the data circulating commercially.