O'Tacos Base de endereços de clientes da O'Tacos · Breach

Actor claims sale of 334,474 O'Tacos customer addresses for $300

Oct 28, 2026 · 1 min read

A threat actor on an underground forum claims to sell 334,474 O'Tacos customer address records for $300. The dataset would include street addresses, cities, ZIP codes, GPS coordinates and phone numbers, dated March 2023 to October 2026. The claim is unverified, O'Tacos has not confirmed an incident, and customers should watch for delivery-themed SMS scams.

By HIFY Radar newsroom Updated 10/28/2026 01:12 AM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A threat actor on an underground forum claims to sell 334,474 O'Tacos customer address records for $300. The data would include delivery addresses, cities, ZIP codes, GPS coordinates and phone numbers. O'Tacos has not confirmed an incident and the claim has not been independently verified.

Why it matters

If the data is real, home addresses tied to phone numbers enable delivery-themed SMS scams and fake-order fraud against customers in France and abroad. There is no breach confirmation yet, but the listing has resurfaced, keeping the risk active.

What to do

Monitor the claim through intelligence sources and await an official statement from O'Tacos. Advise customers and staff to be wary of delivery or order messages by SMS and phone that use personal data.

For the technical team

Affected: O'Tacos Base de endereços de clientes da O'Tacos, rede francesa de fast-food; 334.474 registros de dados de entrega, segundo ale · O'Tacos customer address database, per the claim: 334,474 rows of delivery data with address labels (e.g. home), street addresses, cities, ZIP codes, GPS coordinates and phone numbers, dated March 2023 to October 2026.
Exploitation: No confirmed exploitation. Sale claimed on an underground forum and reported by DailyDarkWeb, asking price $300. The listing first appeared in mid-October and has recently resurfaced.
Fix: No fix applicable; incident unconfirmed by O'Tacos.
Vector: Unknown origin. The source does not describe how the data was obtained; the actor claims to sell an already extracted database and shares a sample record.
More details: The actor says the sale is unrelated to an earlier, disputed O'Tacos sale. Analyst-noted risk: delivery-themed smishing and fake-order scams using address and phone number. The full source is exclusive to DailyDarkWeb subscribers.