Possibly Related Threads…

ShopifyGUY

Hello BreachForums Community,
Today I have uploaded the Le Slip Français Database for you to download, thanks for reading and enjoy!

https://cdn.bf.st/logo/leslipfrancais.jpg

In April 2024, the French underwear maker Le Slip Français (https://www.leslipfrancais.fr/) suffered a data breach. The breach included 1.5M email addresses, physical addresses, names and phone numbers. The data was breached by @ShopifyGUY

Compromised data: Email addresses, Names, Phone numbers, Physical addresses, Purchases

Contents Spoiler

Hidden Content

You must register or login to view this content.

Database Index <> How To Get Credits

Addka72424 · Apr 13, 2024, 07:48 AM

@ShopifyGUY is there any way you can prove the authenticity of the leak?It just looks like the password recovery form accepts emails that don't even exist, and when registering on the site, you can reuse emails from the leak (which makes it more difficult to verify authenticity).Anyway, thanks for the leak.Also your last leak moved to official.

Lucifer0x · Apr 13, 2024, 11:53 AM

Thank you very much by sharing this it was very helpful to me

ShopifyGUY · Apr 13, 2024, 12:15 PM

(Apr 13, 2024, 07:48 AM)Addka72424 Wrote: @ShopifyGUY is there any way you can prove the authenticity of the leak?It just looks like the password recovery form accepts emails that don't even exist, and when registering on the site, you can reuse emails from the leak (which makes it more difficult to verify authenticity).Anyway, thanks for the leak.Also your last leak moved to official.

@Addka72424 Account registration and password reset seem to be broken.
You can verify the leak using their order tracking:

https://www.leslipfrancais.fr/pages/suivi-de-livraison

tamersamer12 · Apr 13, 2024, 12:25 PM

Thank you very much by sharing

Addka72424 · (This post was last modified: Apr 13, 2024, 01:09 PM by Addka72424.)

(Apr 13, 2024, 12:15 PM)ShopifyGUY Wrote:
(Apr 13, 2024, 07:48 AM)Addka72424 Wrote: @ShopifyGUY is there any way you can prove the authenticity of the leak?It just looks like the password recovery form accepts emails that don't even exist, and when registering on the site, you can reuse emails from the leak (which makes it more difficult to verify authenticity).Anyway, thanks for the leak.Also your last leak moved to official.

@Addka72424 Account registration and password reset seem to be broken.
You can verify the leak using their order tracking:

https://www.leslipfrancais.fr/pages/suivi-de-livraison

Thanks!

(Apr 13, 2024, 12:15 PM)ShopifyGUY Wrote:
(Apr 13, 2024, 07:48 AM)Addka72424 Wrote: @ShopifyGUY is there any way you can prove the authenticity of the leak?It just looks like the password recovery form accepts emails that don't even exist, and when registering on the site, you can reuse emails from the leak (which makes it more difficult to verify authenticity).Anyway, thanks for the leak.Also your last leak moved to official.

@Addka72424 Account registration and password reset seem to be broken.
You can verify the leak using their order tracking:

https://www.leslipfrancais.fr/pages/suivi-de-livraison

UPDATE:It looks like the order tracking form is also broken, in any case, I tried to use the data from the leak (I'll attach some examples below) and each time the site wrote that the order was not found
Some lines:

        "id": 7345258201371,

        "email": "[email protected]",

        "accepts_marketing": true,

        "created_at": "2023-09-09T01:07:08+02:00",

        "updated_at": "2023-12-05T11:47:30+01:00",

        "first_name": "Adèle",

        "last_name": "GUINEBRETIERE",

        "orders_count": 1,

        "state": "invited",

        "total_spent": "35.00",

        "last_order_id": 5677337837851,

        "note": null,

        "verified_email": true,

        "multipass_identifier": null,

        "tax_exempt": false,

        "tags": "presta_521720",

        "last_order_name": "92321263",

        "currency": "EUR",

        "phone": "+33770167059",

        "addresses": [

            {

                "id": 9854003544347,

                "customer_id": 7345258201371,

                "first_name": "Adèle",

                "last_name": "GUINEBRETIERE",

                "company": null,

                "address1": "1 Monterban",

                "address2": "",

                "city": "Adriers",

                "province": null,

                "country": "France",

                "zip": "86430",

                "phone": "0770167059",

                "name": "Adèle GUINEBRETIERE",

                "province_code": null,

                "country_code": "FR",

                "country_name": "France",

                "default": true

            },

and:

{

        "id": 7345258070299,

        "email": "[email protected]",

        "accepts_marketing": false,

        "created_at": "2023-09-09T01:07:06+02:00",

        "updated_at": "2023-12-05T12:11:17+01:00",

        "first_name": "Adeline",

        "last_name": "LE MASSON",

        "orders_count": 1,

        "state": "invited",

        "total_spent": "94.50",

        "last_order_id": 5697942225179,

        "note": null,

        "verified_email": true,

        "multipass_identifier": null,

        "tax_exempt": false,

        "tags": "presta_777442",

        "last_order_name": "92732497",

        "currency": "EUR",

        "phone": "+33686038195",

        "addresses": [

            {

                "id": 9875271549211,

                "customer_id": 7345258070299,

                "first_name": "Adeline",

                "last_name": "LE MASSON",

                "company": null,

                "address1": "LIEU DIT CHEMARIPAUD",

                "address2": "",

                "city": "TREDION",

                "province": null,

                "country": "France",

                "zip": "56250",

                "phone": "+33686038195",

                "name": "Adeline LE MASSON",

                "province_code": null,

                "country_code": "FR",

                "country_name": "France",

                "default": true

            },

@ShopifyGUY are there any other ways?

ShopifyGUY · (This post was last modified: Apr 13, 2024, 02:40 PM by ShopifyGUY.)

(Apr 13, 2024, 12:51 PM)Addka72424 Wrote:
(Apr 13, 2024, 12:15 PM)ShopifyGUY Wrote:
(Apr 13, 2024, 07:48 AM)Addka72424 Wrote: @ShopifyGUY is there any way you can prove the authenticity of the leak?It just looks like the password recovery form accepts emails that don't even exist, and when registering on the site, you can reuse emails from the leak (which makes it more difficult to verify authenticity).Anyway, thanks for the leak.Also your last leak moved to official.

@Addka72424 Account registration and password reset seem to be broken.
You can verify the leak using their order tracking:

https://www.leslipfrancais.fr/pages/suivi-de-livraison
Thanks!

(Apr 13, 2024, 12:15 PM)ShopifyGUY Wrote:
(Apr 13, 2024, 07:48 AM)Addka72424 Wrote: @ShopifyGUY is there any way you can prove the authenticity of the leak?It just looks like the password recovery form accepts emails that don't even exist, and when registering on the site, you can reuse emails from the leak (which makes it more difficult to verify authenticity).Anyway, thanks for the leak.Also your last leak moved to official.

@Addka72424 Account registration and password reset seem to be broken.
You can verify the leak using their order tracking:

https://www.leslipfrancais.fr/pages/suivi-de-livraison
UPDATE:It looks like the order tracking form is also broken, in any case, I tried to use the data from the leak (I'll attach some examples below) and each time the site wrote that the order was not found
Some lines:
"id": 7345258201371, "email": "[email protected]", "accepts_marketing": true, "created_at": "2023-09-09T01:07:08+02:00", "updated_at": "2023-12-05T11:47:30+01:00", "first_name": "Adèle", "last_name": "GUINEBRETIERE", "orders_count": 1, "state": "invited", "total_spent": "35.00", "last_order_id": 5677337837851, "note": null, "verified_email": true, "multipass_identifier": null, "tax_exempt": false, "tags": "presta_521720", "last_order_name": "92321263", "currency": "EUR", "phone": "+33770167059", "addresses": [ { "id": 9854003544347, "customer_id": 7345258201371, "first_name": "Adèle", "last_name": "GUINEBRETIERE", "company": null, "address1": "1 Monterban", "address2": "", "city": "Adriers", "province": null, "country": "France", "zip": "86430", "phone": "0770167059", "name": "Adèle GUINEBRETIERE", "province_code": null, "country_code": "FR", "country_name": "France", "default": true },
and:
{ "id": 7345258070299, "email": "[email protected]", "accepts_marketing": false, "created_at": "2023-09-09T01:07:06+02:00", "updated_at": "2023-12-05T12:11:17+01:00", "first_name": "Adeline", "last_name": "LE MASSON", "orders_count": 1, "state": "invited", "total_spent": "94.50", "last_order_id": 5697942225179, "note": null, "verified_email": true, "multipass_identifier": null, "tax_exempt": false, "tags": "presta_777442", "last_order_name": "92732497", "currency": "EUR", "phone": "+33686038195", "addresses": [ { "id": 9875271549211, "customer_id": 7345258070299, "first_name": "Adeline", "last_name": "LE MASSON", "company": null, "address1": "LIEU DIT CHEMARIPAUD", "address2": "", "city": "TREDION", "province": null, "country": "France", "zip": "56250", "phone": "+33686038195", "name": "Adeline LE MASSON", "province_code": null, "country_code": "FR", "country_name": "France", "default": true },
@ShopifyGUY are there any other ways?

@Addka72424

Yes, Use the order return page:
https://www.leslipfrancais.fr/a/return

Using the email and last_order_name value it says "Your order does not allow for a return" but if you give wrong data it says "Order not found"

Make sure to use last_order_name not last_order_id

Magouilleur · Apr 13, 2024, 02:34 PM

(Apr 13, 2024, 12:51 PM)Addka72424 Wrote:
(Apr 13, 2024, 12:15 PM)ShopifyGUY Wrote:
(Apr 13, 2024, 07:48 AM)Addka72424 Wrote: @ShopifyGUY is there any way you can prove the authenticity of the leak?It just looks like the password recovery form accepts emails that don't even exist, and when registering on the site, you can reuse emails from the leak (which makes it more difficult to verify authenticity).Anyway, thanks for the leak.Also your last leak moved to official.

@Addka72424 Account registration and password reset seem to be broken.
You can verify the leak using their order tracking:

https://www.leslipfrancais.fr/pages/suivi-de-livraison
Thanks!

(Apr 13, 2024, 12:15 PM)ShopifyGUY Wrote:
(Apr 13, 2024, 07:48 AM)Addka72424 Wrote: @ShopifyGUY is there any way you can prove the authenticity of the leak?It just looks like the password recovery form accepts emails that don't even exist, and when registering on the site, you can reuse emails from the leak (which makes it more difficult to verify authenticity).Anyway, thanks for the leak.Also your last leak moved to official.

@Addka72424 Account registration and password reset seem to be broken.
You can verify the leak using their order tracking:

https://www.leslipfrancais.fr/pages/suivi-de-livraison
UPDATE:It looks like the order tracking form is also broken, in any case, I tried to use the data from the leak (I'll attach some examples below) and each time the site wrote that the order was not found
Some lines:
"id": 7345258201371, "email": "[email protected]", "accepts_marketing": true, "created_at": "2023-09-09T01:07:08+02:00", "updated_at": "2023-12-05T11:47:30+01:00", "first_name": "Adèle", "last_name": "GUINEBRETIERE", "orders_count": 1, "state": "invited", "total_spent": "35.00", "last_order_id": 5677337837851, "note": null, "verified_email": true, "multipass_identifier": null, "tax_exempt": false, "tags": "presta_521720", "last_order_name": "92321263", "currency": "EUR", "phone": "+33770167059", "addresses": [ { "id": 9854003544347, "customer_id": 7345258201371, "first_name": "Adèle", "last_name": "GUINEBRETIERE", "company": null, "address1": "1 Monterban", "address2": "", "city": "Adriers", "province": null, "country": "France", "zip": "86430", "phone": "0770167059", "name": "Adèle GUINEBRETIERE", "province_code": null, "country_code": "FR", "country_name": "France", "default": true },
and:
{ "id": 7345258070299, "email": "[email protected]", "accepts_marketing": false, "created_at": "2023-09-09T01:07:06+02:00", "updated_at": "2023-12-05T12:11:17+01:00", "first_name": "Adeline", "last_name": "LE MASSON", "orders_count": 1, "state": "invited", "total_spent": "94.50", "last_order_id": 5697942225179, "note": null, "verified_email": true, "multipass_identifier": null, "tax_exempt": false, "tags": "presta_777442", "last_order_name": "92732497", "currency": "EUR", "phone": "+33686038195", "addresses": [ { "id": 9875271549211, "customer_id": 7345258070299, "first_name": "Adeline", "last_name": "LE MASSON", "company": null, "address1": "LIEU DIT CHEMARIPAUD", "address2": "", "city": "TREDION", "province": null, "country": "France", "zip": "56250", "phone": "+33686038195", "name": "Adeline LE MASSON", "province_code": null, "country_code": "FR", "country_name": "France", "default": true },
@ShopifyGUY are there any other ways?

When you try to log in with any email address it says : "We just changed our site. If your last order was before October 16,2023, click here to recreate your account and find your orders".
So I think that you can find orders from recreated account, while people who haven't recreated an account can't track their orders.

ShopifyGUY · Apr 13, 2024, 02:47 PM

(Apr 13, 2024, 02:34 PM)Magouilleur Wrote:
(Apr 13, 2024, 12:51 PM)Addka72424 Wrote:
(Apr 13, 2024, 12:15 PM)ShopifyGUY Wrote:
(Apr 13, 2024, 07:48 AM)Addka72424 Wrote: @ShopifyGUY is there any way you can prove the authenticity of the leak?It just looks like the password recovery form accepts emails that don't even exist, and when registering on the site, you can reuse emails from the leak (which makes it more difficult to verify authenticity).Anyway, thanks for the leak.Also your last leak moved to official.

@Addka72424 Account registration and password reset seem to be broken.
You can verify the leak using their order tracking:

https://www.leslipfrancais.fr/pages/suivi-de-livraison
Thanks!

(Apr 13, 2024, 12:15 PM)ShopifyGUY Wrote:
(Apr 13, 2024, 07:48 AM)Addka72424 Wrote: @ShopifyGUY is there any way you can prove the authenticity of the leak?It just looks like the password recovery form accepts emails that don't even exist, and when registering on the site, you can reuse emails from the leak (which makes it more difficult to verify authenticity).Anyway, thanks for the leak.Also your last leak moved to official.

@Addka72424 Account registration and password reset seem to be broken.
You can verify the leak using their order tracking:

https://www.leslipfrancais.fr/pages/suivi-de-livraison
UPDATE:It looks like the order tracking form is also broken, in any case, I tried to use the data from the leak (I'll attach some examples below) and each time the site wrote that the order was not found
Some lines:
"id": 7345258201371, "email": "[email protected]", "accepts_marketing": true, "created_at": "2023-09-09T01:07:08+02:00", "updated_at": "2023-12-05T11:47:30+01:00", "first_name": "Adèle", "last_name": "GUINEBRETIERE", "orders_count": 1, "state": "invited", "total_spent": "35.00", "last_order_id": 5677337837851, "note": null, "verified_email": true, "multipass_identifier": null, "tax_exempt": false, "tags": "presta_521720", "last_order_name": "92321263", "currency": "EUR", "phone": "+33770167059", "addresses": [ { "id": 9854003544347, "customer_id": 7345258201371, "first_name": "Adèle", "last_name": "GUINEBRETIERE", "company": null, "address1": "1 Monterban", "address2": "", "city": "Adriers", "province": null, "country": "France", "zip": "86430", "phone": "0770167059", "name": "Adèle GUINEBRETIERE", "province_code": null, "country_code": "FR", "country_name": "France", "default": true },
and:
{ "id": 7345258070299, "email": "[email protected]", "accepts_marketing": false, "created_at": "2023-09-09T01:07:06+02:00", "updated_at": "2023-12-05T12:11:17+01:00", "first_name": "Adeline", "last_name": "LE MASSON", "orders_count": 1, "state": "invited", "total_spent": "94.50", "last_order_id": 5697942225179, "note": null, "verified_email": true, "multipass_identifier": null, "tax_exempt": false, "tags": "presta_777442", "last_order_name": "92732497", "currency": "EUR", "phone": "+33686038195", "addresses": [ { "id": 9875271549211, "customer_id": 7345258070299, "first_name": "Adeline", "last_name": "LE MASSON", "company": null, "address1": "LIEU DIT CHEMARIPAUD", "address2": "", "city": "TREDION", "province": null, "country": "France", "zip": "56250", "phone": "+33686038195", "name": "Adeline LE MASSON", "province_code": null, "country_code": "FR", "country_name": "France", "default": true },
@ShopifyGUY are there any other ways?

When you try to log in with any email address it says : "We just changed our site. If your last order was before October 16,2023, click here to recreate your account and find your orders".
So I think that you can find orders from recreated account, while people who haven't recreated an account can't track their orders.

Yeah, makes sense, they just moved from PrestaShop to Shopify.

Addka72424 · Apr 13, 2024, 04:37 PM

(Apr 13, 2024, 02:33 PM)ShopifyGUY Wrote:
(Apr 13, 2024, 12:51 PM)Addka72424 Wrote:
(Apr 13, 2024, 12:15 PM)ShopifyGUY Wrote:
(Apr 13, 2024, 07:48 AM)Addka72424 Wrote: @ShopifyGUY is there any way you can prove the authenticity of the leak?It just looks like the password recovery form accepts emails that don't even exist, and when registering on the site, you can reuse emails from the leak (which makes it more difficult to verify authenticity).Anyway, thanks for the leak.Also your last leak moved to official.

@Addka72424 Account registration and password reset seem to be broken.
You can verify the leak using their order tracking:

https://www.leslipfrancais.fr/pages/suivi-de-livraison
(Apr 13, 2024, 12:15 PM)ShopifyGUY Wrote:
(Apr 13, 2024, 07:48 AM)Addka72424 Wrote: @ShopifyGUY is there any way you can prove the authenticity of the leak?It just looks like the password recovery form accepts emails that don't even exist, and when registering on the site, you can reuse emails from the leak (which makes it more difficult to verify authenticity).Anyway, thanks for the leak.Also your last leak moved to official.

@Addka72424 Account registration and password reset seem to be broken.
You can verify the leak using their order tracking:

https://www.leslipfrancais.fr/pages/suivi-de-livraison
UPDATE:It looks like the order tracking form is also broken, in any case, I tried to use the data from the leak (I'll attach some examples below) and each time the site wrote that the order was not found
Some lines:
"id": 7345258201371, "email": "[email protected]", "accepts_marketing": true, "created_at": "2023-09-09T01:07:08+02:00", "updated_at": "2023-12-05T11:47:30+01:00", "first_name": "Adèle", "last_name": "GUINEBRETIERE", "orders_count": 1, "state": "invited", "total_spent": "35.00", "last_order_id": 5677337837851, "note": null, "verified_email": true, "multipass_identifier": null, "tax_exempt": false, "tags": "presta_521720", "last_order_name": "92321263", "currency": "EUR", "phone": "+33770167059", "addresses": [ { "id": 9854003544347, "customer_id": 7345258201371, "first_name": "Adèle", "last_name": "GUINEBRETIERE", "company": null, "address1": "1 Monterban", "address2": "", "city": "Adriers", "province": null, "country": "France", "zip": "86430", "phone": "0770167059", "name": "Adèle GUINEBRETIERE", "province_code": null, "country_code": "FR", "country_name": "France", "default": true },
and:
{ "id": 7345258070299, "email": "[email protected]", "accepts_marketing": false, "created_at": "2023-09-09T01:07:06+02:00", "updated_at": "2023-12-05T12:11:17+01:00", "first_name": "Adeline", "last_name": "LE MASSON", "orders_count": 1, "state": "invited", "total_spent": "94.50", "last_order_id": 5697942225179, "note": null, "verified_email": true, "multipass_identifier": null, "tax_exempt": false, "tags": "presta_777442", "last_order_name": "92732497", "currency": "EUR", "phone": "+33686038195", "addresses": [ { "id": 9875271549211, "customer_id": 7345258070299, "first_name": "Adeline", "last_name": "LE MASSON", "company": null, "address1": "LIEU DIT CHEMARIPAUD", "address2": "", "city": "TREDION", "province": null, "country": "France", "zip": "56250", "phone": "+33686038195", "name": "Adeline LE MASSON", "province_code": null, "country_code": "FR", "country_name": "France", "default": true },
@ShopifyGUY are there any other ways?
@Addka72424

Yes, Use the order return page:
https://www.leslipfrancais.fr/a/return

Using the email and last_order_name value it says "Your order does not allow for a return" but if you give wrong data it says "Order not found"

Make sure to use last_order_name not last_order_id

Now the authenticity of the leak has been confirmed.Thank you for your cooperation.Wait for your leak to be included in the official section.

Possibly Related Threads…
Thread		Author	Replies	Views	Last Post
	Crunchbase Database - Leaked, Download!	Addka72424	52	6,190	Yesterday, 09:35 PM Last Post: io8cztq
	DemandScience by Pure Incubation Database - Leaked, Download!	Cain	191	32,221	Yesterday, 09:34 PM Last Post: Whattho
	Apollo Database - Leaked, Download!	Automation	169	47,998	Yesterday, 02:02 PM Last Post: Rock_cracks
	Cyberphoenix Forum Database - Leaked, Download!	Typical_Retard	24	4,614	Yesterday, 10:58 AM Last Post: iwalkwghosts
	CarsDir.com Database - Leaked, Download!	Al-Sheikh	31	1,994	Yesterday, 02:00 AM Last Post: thesharkeat