Hackers claim a Decathlon database containing 160 million customer records is for sale. Here’s what may be involved and how you can protect your information while the claim remains unconfirmed.
Table of Contents
What Happened?
The seller reportedly offered the database for cryptocurrency and shared a sample of the information. However, the records have not been independently verified, and Decathlon has not confirmed a data breach.
If the database is genuine, criminals could use customer details to create convincing phishing emails, attempt account takeovers, or test reused passwords on other websites.
Your information may also appear in older data breaches that received little public attention. Because people often do not know their data was leaked, regular monitoring can help identify risks earlier.
Futureproof monitors your data for leaks 24/7 and helps you reduce scam risks with simple, clear steps.
Who May Be Affected and What Data Is Involved?
No Decathlon customers are confirmed to be affected. The seller claims the database contains:
- Customer IDs
- Email addresses
- Password hashes
- First and last names
- Dates of birth
- Phone numbers
- Home addresses and location details
- Account and email-verification status
- Preferred stores and favorite sports
- Purchase-related information
Password hashes are coded versions of passwords. They are not plain-text passwords, but weak or reused passwords may sometimes be recovered.
If the database is genuine, these details could help criminals create messages that look personal and believable.
Names, locations, store preferences, and shopping interests can make fake Decathlon emails or texts feel genuine.
Password information may also support credential stuffing, which means testing reused passwords on other websites.
Futureproof scans your data for leaks and shows exactly how to close security gaps — before scammers find them first.
Check my safetyHow the Claimed Decathlon Breach May Have Happened
Neither Cyber Security News nor Decathlon has shared technical details about how the database may have been obtained.
We do not know whether criminals entered a Decathlon system, accessed supplier data, or reused information from older incidents.
Claims on criminal forums may contain real data, old information, mixed records, or completely false details.
Therefore, researchers need independent evidence before linking the advertised database to Decathlon.
At Futureproof, Kevin explains digital safety in simple words, with clear tips and zero fluff. He holds a degree in information technology and studies fraud trends to keep his tips up-to-date.
In his free time, Kevin plays with his cat, enjoys board-game nights, and hunts for New York’s best cinnamon rolls.
