A cybercriminal has claimed to leak a database containing the information of 21,393 customer accounts from the natural cosmetics brand Predige, according to a report by FrenchBreaches. The data, posted on a hacking forum on October 4, 2026, includes hashed passwords, email addresses, and birth dates from the company’s online store.
21,393 customer accounts exposed in SQL leak
The leaked file, which represents a raw copy of the predige.com SQL database, totals approximately 514 MB when decompressed. The full dataset is currently available for download on the forum in exchange for credits.
Personal and technical data included in the breach
The exposed information consists of both identity details and account metadata. According to the forum claim and the published sample, the leaked data includes:
- Full names (First and Last)
- Email addresses
- Dates of birth
- Account identifiers
- Account creation and modification dates
- Hashed passwords
- Technical account information
The presence of hashed passwords indicates that the passwords were not stored in plain text, though the specific encryption method used by Predige was not specified.
Timeline discrepancy between discovery and publication
The attacker claims the data breach was originally discovered on August 1, 2024, despite the data only being published on the forum in October 2026.
Predige has not confirmed the attack
Predige, which is marketed in France via its subsidiary Predige SAS, has not issued a public statement confirming the breach or the specific number of affected accounts. Because the company has not verified the claims, the exact scale and origin of the leak remain disputed.
Predige data leak queries
What are the primary risks for customers in this leak?
The exposure of names, emails, and birth dates increases the risk of targeted phishing attacks, identity theft, and attempts to recover accounts on other platforms where users may have reused the same credentials.
How can users tell if their Predige account was affected?
As Predige has not yet publicly confirmed the breach or provided a notification system, users cannot officially verify their status through the company. However, the leaked database reportedly contains 21,393 accounts.
Keep reading