5,304 customers affected by claimed data leak at Loft by Denis Moines

On 6 January 2026, Loft by Denis — a unisex hair salon on rue des Moines in the 17th arrondissement of Paris — was named in a claimed data leak after a customer database was published on the cybercrime marketplace BreachForums. The post advertised records for 5,304 of the salon's clients.

The leak appears to stem from the salon's customer/appointment database rather than an attack disclosed by the business itself. The exposed records include:

• First and last names
• Mobile phone numbers
• Email addresses
• Number of past visits
• Profile creation and last-update timestamps

While none of the exposed fields are financial or government-identity data, the combination of contact details with visit history is enough to enable targeted phishing or smishing against the salon's clientele.

As of reporting, the breach remains a claim circulated on BreachForums and had not been independently confirmed or acknowledged by the business. Because the dataset was published publicly, the exposure is treated as ongoing.