🔴 26M bol.com Customer Records for Sale on Darkweb

A listing on an underground forum alleges the theft of a massive database containing personal and financial data of 26 million customers from bol.com, the Netherlands' largest online marketplace. The hacker, operating under the username 'chara', claims to possess a dataset that includes full names, email addresses, phone numbers, home addresses, and detailed purchase history for users in the Netherlands and Belgium. The actor is offering the data for $500 via cryptocurrency.

According to the sample records provided in the forum post, the leak contains highly sensitive Personally Identifiable Information (PII) and financial metadata. The exposed fields include:

- Full names, email addresses, and phone numbers
- Complete residential addresses including street names, house numbers, and postal codes
- Account creation dates and last login timestamps
- Order history details such as total spent, recent order IDs, categories, and payment methods (e.g., iDEAL, Creditcard)
- Delivery information including carriers and delivery types

🔺 bol.com is a major e-commerce platform in Europe, serving millions of customers across the Benelux region. The company is part of the Bol Group, which also operates in Germany and other European markets. A breach of this magnitude would expose customers to significant risks of targeted phishing, identity theft, and physical security threats due to the inclusion of home addresses.