Cultura.com

A data breach involving the French retailer Cultura occurred in late 2024. The incident was part of a larger supply chain attack targeting a third-party service provider used by multiple French companies. The compromised data includes customer personal information such as full names, email addresses, phone numbers, and physical addresses. Security researchers identified that the breach originated from an unauthorized access to a database via a vulnerability in the service provider system, which allowed hackers to export millions of records belonging to the retailer customers.