[thelastwhitehat]

Description:
On November 14, 2025, the jewelry retailer UNOde50 (unode50.com) was breached by the WorldLeaks ransomware group, resulting in the compromise of ~1,222,107 records. When UNOde50 failed to respond, the data was leaked on several hacker forums. The compromised data includes full names, email addresses, phone numbers, genders, shipping addresses, and more.

Samples:

==> Emails Not Opened Last 30 days20211027_Emails Not Opened Last 30 days2.csv <==
EMAIL,CUSTOMER_ID,DNI,FIRSTNAME,LASTNAME,GENDER,PHONE,PHONE_MOBILE,CURRENCY_ISO_CODE,LANGUAGE_CODE,SHIPPING_CITY,SHIPPING_COUNTRY,SHIPPING_POSTALCODE,SHIPPING_STATE,SHIPPING_STREET,BILLING_CITY,BILLING_COUNTRY,BILLING_POSTALCODE,BILLING_STATE,BILLING_STREET,REGISTERED_APP,REGISTERED_NEWSLETTER,ISPERSONACCOUNT,FINALITY1,FINALITY2,FINALITY3,UNODE50_WORLD_CUSTOMER,PROMO_PRESENT_DELIVERED,SHOP_CODE,UNODE50_WORLD_DATETIME,SHOP_CODE_FAVORITE,SOURCE_RECORD,WEBSITE_CODE,REGISTERED_DATE,NEWSLETTER,EMAIL_VALID,EMAIL_VALID_DATE,CUSTOMER_TYPE,COUNTRY_LANG,OPT_OUT,OPT_OUT_DATE,PROPERTY1,PROPERTY2,PROPERTY3,SCORING,BIRTHDATE,MERCADO,EMPRESA,BLOQUEADO,CI_Fiel,CI_TotalTicket,CI_Unidades,CI_TotalUPT,CI_TotalEurAmountCustomer,CI_TotalAVGTicketCustomer,CI_TotalEurAmountCustomerLastYear,CI_FirstPurchasesDate,CI_LastPurchasesDate,CI_TypeCustomer,NL_REGISTERED_MEDIUM,NL_REGISTERED_STORE_CHANNEL,NL_REGISTERED_SOURCE,NL_REGISTERED_COUNTRY,NL_REGISTERED_DEVICE,PHONE_MOBILE_PREFIX,NL_REGISTERED_DATE
[email protected],,72393205 S,ALAZNE,SANCHES AMOR,,,615007093.0,EUR,ES,,ES,48901,Vizcaya,C/NAFARROA Nº3 4 C,,ES,48901,Vizcaya,C/NAFARROA Nº3 4 C,,0.0,,1.0,0.0,0.0,0.0,0.0,T12,,T12,SF,ES,,,,,,,,,,,,,1981-03-25 00:00:00,ES_ES,,,,,,,,,,,,,,,,,,,
[email protected],,,ANA,CRISTINA MENDO,M,,932448067.0,EUR,en,,PT,,0,,,PT,,0,,,0.0,,0.0,0.0,0.0,0.0,0.0,T38,,T38,SF,INT,,,,,,,,,,,,,1965-12-17 00:00:00,INT_en,,,,,,,,,,,,,,,,,,,

==> 7-11-2021-CUSTOMERS_TRACKING.csv <==
fecha_ultima_apertura,fecha_ultimo_click,email_ultima_apertura,email_ultimo_click,aperturas_ultimos_6m,aperturas_ultimos_3m,clicks_ultimos_6m,clicks_ultimos_3m,clicks_totales,aperturas_totales,SubscriberKey,EmailAddress,ultima_fecha_envio
,,,,,,,,0,0,[email protected],[email protected],08/07/2021 0:00:54
11/03/2021 8:55:04,,2021_03_11_THREADOFLIFE_UK,2021_03_11_THREADOFLIFE_UK,,,,,0,1,[email protected],[email protected],08/07/2021 0:00:54

Downloads:

Hidden Content

You must register or login to view this content.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.

[natas666]

thankx for sharing !!

[ThinkingOne]

For the curious, there are 7 files (the number after the filename is the line count):

7-11-2021-CUSTOMERS_TRACKING.csv: 479616
Emails Not Opened Last 30 days20211027_Emails Not Opened Last 30 days2.csv: 317300
NUEVO INFORME DHL EXPRESS 04112019_DHL EXPRESS .csv: 70933
NUEVO INFORME DHL EXPRESS 04112019_Entregas SAP 2018.csv: 86503
NUEVO INFORME DHL EXPRESS 04112019_Entregas SAP 2019.csv: 61898
NUEVO INFORME DHL EXPRESS 04112019_Hoja1.csv: 102933
NUEVO INFORME DHL EXPRESS 04112019_Hoja2.csv: 102934

The ones with names in Spanish have mailing addresses, with about 350K lines (and about 48K unique names).

The CUSTOMERS_TRACKING file just has email and no other useful fields. The "Emails Not Opened" file has more useful information, but many fields are sparsely populated (e.g. address in under 10% of lines, phone in about half the records).

[immortalIV]

Thank for this !!!!

Description:
On November 14, 2025, the jewelry retailer UNOde50 (unode50.com) was breached by the WorldLeaks ransomware group, resulting in the compromise of ~1,222,107 records. When UNOde50 failed to respond, the data was leaked on several hacker forums. The compromised data includes full names, email addresses, phone numbers, genders, shipping addresses, and more.

Samples:

==> Emails Not Opened Last 30 days20211027_Emails Not Opened Last 30 days2.csv <==
EMAIL,CUSTOMER_ID,DNI,FIRSTNAME,LASTNAME,GENDER,PHONE,PHONE_MOBILE,CURRENCY_ISO_CODE,LANGUAGE_CODE,SHIPPING_CITY,SHIPPING_COUNTRY,SHIPPING_POSTALCODE,SHIPPING_STATE,SHIPPING_STREET,BILLING_CITY,BILLING_COUNTRY,BILLING_POSTALCODE,BILLING_STATE,BILLING_STREET,REGISTERED_APP,REGISTERED_NEWSLETTER,ISPERSONACCOUNT,FINALITY1,FINALITY2,FINALITY3,UNODE50_WORLD_CUSTOMER,PROMO_PRESENT_DELIVERED,SHOP_CODE,UNODE50_WORLD_DATETIME,SHOP_CODE_FAVORITE,SOURCE_RECORD,WEBSITE_CODE,REGISTERED_DATE,NEWSLETTER,EMAIL_VALID,EMAIL_VALID_DATE,CUSTOMER_TYPE,COUNTRY_LANG,OPT_OUT,OPT_OUT_DATE,PROPERTY1,PROPERTY2,PROPERTY3,SCORING,BIRTHDATE,MERCADO,EMPRESA,BLOQUEADO,CI_Fiel,CI_TotalTicket,CI_Unidades,CI_TotalUPT,CI_TotalEurAmountCustomer,CI_TotalAVGTicketCustomer,CI_TotalEurAmountCustomerLastYear,CI_FirstPurchasesDate,CI_LastPurchasesDate,CI_TypeCustomer,NL_REGISTERED_MEDIUM,NL_REGISTERED_STORE_CHANNEL,NL_REGISTERED_SOURCE,NL_REGISTERED_COUNTRY,NL_REGISTERED_DEVICE,PHONE_MOBILE_PREFIX,NL_REGISTERED_DATE
[email protected],,72393205 S,ALAZNE,SANCHES AMOR,,,615007093.0,EUR,ES,,ES,48901,Vizcaya,C/NAFARROA Nº3 4 C,,ES,48901,Vizcaya,C/NAFARROA Nº3 4 C,,0.0,,1.0,0.0,0.0,0.0,0.0,T12,,T12,SF,ES,,,,,,,,,,,,,1981-03-25 00:00:00,ES_ES,,,,,,,,,,,,,,,,,,,
[email protected],,,ANA,CRISTINA MENDO,M,,932448067.0,EUR,en,,PT,,0,,,PT,,0,,,0.0,,0.0,0.0,0.0,0.0,0.0,T38,,T38,SF,INT,,,,,,,,,,,,,1965-12-17 00:00:00,INT_en,,,,,,,,,,,,,,,,,,,

==> 7-11-2021-CUSTOMERS_TRACKING.csv <==
fecha_ultima_apertura,fecha_ultimo_click,email_ultima_apertura,email_ultimo_click,aperturas_ultimos_6m,aperturas_ultimos_3m,clicks_ultimos_6m,clicks_ultimos_3m,clicks_totales,aperturas_totales,SubscriberKey,EmailAddress,ultima_fecha_envio
,,,,,,,,0,0,[email protected],[email protected],08/07/2021 0:00:54
11/03/2021 8:55:04,,2021_03_11_THREADOFLIFE_UK,2021_03_11_THREADOFLIFE_UK,,,,,0,1,[email protected],[email protected],08/07/2021 0:00:54

Downloads:

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.

[messon45zx]

this might be interesting to look at

[Knightdale33]

Oh my gosh thanks my friend

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.