ObjetRama: over 80,000 customers exposed in a 209,000-row leak

On 2 May 2026, ObjetRama — a French e-commerce retailer specialising in promotional and branded items (ObjetRama.fr) — became the subject of a data leak when a threat actor using the alias ChimeraZ published a database attributed to the company on cybercriminal forums.

The leaked database comprises roughly 209,000 rows corresponding to nearly 80,000 distinct customers. The published sample is centred on orders and billing, allowing the reconstruction of detailed customer activity — in some cases for professional (B2B) clients, exposing their purchasing volumes and ordering habits.

Exposed data categories reported include:

• Customer names and postal addresses
• Order history and invoices
• Purchase amounts and products ordered
• Payment method and transaction dates

The exposure raises a heightened risk of targeted phishing referencing real orders or invoices, B2B fraud, and identity theft, with business customers' commercial activity particularly exposed. As of reporting, ObjetRama has not publicly confirmed the authenticity of the data or issued an official response, so the status remains unverified.