29-04-26, 02:51 PM
What is "Boulangerie Ange" ?
Founded: 2008 Headquarters: Aix-en-Provence, France
Number of Stores (2026): 300+ bakeries across France (as of early 2026)
Number of Franchisees: 158
Employees: 6000+
Annual Revenue (2024): €398 million (excluding tax)
Baguettes Sold Annually: 66 million
Registered Users: More than 800'000
How "Ange" was dumped ?
Really simple. It's a basic Authorization token previously located in the headers of few requests located in a "Ange" subdomain.(Is still active and can be attacked at any moment)
This token was enough to dump almost the entire database by accessing it via the classic api.
What is the format of this database ? How many users are affected ? When was this database dumped ?
lastname:firstname:phone:city
A little more than 812'000 users.
This database has been dump less than a month.
Proof of this dump (first 1k lines) :
TXT File : https://qu.ax/u76uF
Dump proof screenshot : https://ibb.co/vyMgPcp
What is the price for this database ?
The actual price is 500$ pm for more information.
Salutations à Johanna Brousse et à Clement Domingo.
