Madeindesign: 464,000 customer accounts exposed in a data leak

On 1 May 2026, Madeindesign — a French online retailer specialising in designer furniture and home décor — was named as the victim of a data leak when a database attributed to its site Madeindesign.com was published on a cybercrime forum by a threat actor operating under the alias ChimeraZ.

According to the listing, the dataset contained roughly 464,000 customer accounts and was distributed as a JSON file of about 205 MB, accompanied by a sample intended to demonstrate the data's authenticity. ChimeraZ has been linked to a wider wave of claimed compromises against French companies across retail, tourism, real estate and education during 2026.

While the exact records vary, leaks of this kind for an e-commerce customer base typically expose:

• First and last names
• Email addresses
• Postal addresses
• Phone numbers
• Order history and customer-account details

As of reporting, Madeindesign had not issued a detailed official confirmation of the incident, and the full integrity of the leaked data remained to be independently verified. The volume of records and the credible sample lend plausibility to the claim, but the attack vector was not disclosed and the breach's status is unconfirmed.