Customer Data Exposed in LDLC and LuLu Retail Breaches

French retailer LDLC disclosed a breach affecting customers of its physical stores after stolen data was advertised for sale on a hacking forum. The exposed dataset reportedly included 1.26 million unique email addresses along with customers' names, phone numbers, and physical addresses, indicating broad exposure of personally identifiable information tied to retail transactions.

Emirati retailer LuLu also suffered a customer data breach in which an initial set of about 190,000 email addresses and linked phone numbers was shared on a hacking forum. The incident escalated when the threat actor later leaked a larger backup from October 2022, exposing an additional 2.6 million unique email addresses as well as names, physical addresses, order data, and PBKDF2 password hashes, significantly increasing the risk of account compromise and follow-on phishing or fraud.