Incidents involving:

Leroy Merlin

Data breachContainedMay 7, 2026

Leroy Merlin: more than 367,000 customers exposed in a leak linked to the Leroy&moi program

On May 6, 2026, a threat actor using the alias Lagui posted a database of 367,462 Leroy Merlin France loyalty-program customers — names, dates of birth, contact details, postal addresses and account data — said to have been harvested by automated scraping of the Leroy&moi platform.

Victim: Leroy Merlin
Records: 367.5K

Data breachContainedDecember 2, 2025

Leak at Leroy Merlin

In December 2025, French DIY retailer Leroy Merlin disclosed a cyberattack that exposed the loyalty-program data of several hundred thousand French customers, including names, contact details, postal addresses and dates of birth; no banking data or passwords were affected.

Victim: Leroy Merlin