683,936 customers affected by claimed leak at Livre en Poche

On 25 January 2026, Livre en Poche — the online storefront of the French solidarity cooperative Livrenpoche (Chouettecoop), which resells secondhand books, CDs, DVDs and other items — was named in a claimed data leak affecting its customers. A threat actor advertised a dataset said to be drawn from the retailer's order records, putting roughly 683,936 rows up for sale or distribution.

According to the claim, the exposed material centres on customer order data rather than payment-card details. Reported categories include:

• Customer names and contact details (email addresses, phone numbers)
• Postal/delivery addresses
• Order history and order-related metadata

The figure of about 684,000 lines refers to database rows in the leaked file and does not necessarily equate to the same number of distinct individuals, since a single customer may account for multiple orders.

The breach is so far known only through the French data-leak tracker that catalogued the listing; at the time of writing there is no public confirmation or statement from Livrenpoche, no disclosed attack vector, and no independent corroboration of the scale or authenticity of the data. The incident is therefore recorded as a claimed leak with unknown status pending verification.