What Happened
In the Grand Froid data breach disclosed by security sources in December 2025 and attributed to an intrusion dating back to around January 2025, the French cold-weather clothing retailer grand-froid.fr allegedly had a database of roughly 1 million customers exfiltrated and later leaked on dark‑web forums, exposing order histories, payment-related information, and personally identifiable information (PII) such as names, email addresses, phone numbers, physical addresses, and other customer/order details. The leaked dataset reportedly ties these identity attributes directly to specific orders and transactions, raising risks of targeted phishing, fraud, and identity abuse; however, as of the reports referenced, there was no clear public confirmation from the company itself of the exact number of affected records or whether full payment card data was included.
