Suposta base de clientes da Planity · Breach

[Single source] Actor claims sale of 423,856 Planity customer records

Nov 12, 2026 · 1 min read

An actor claims to be selling 423,856 records from French platform Planity. The data allegedly includes names, phone numbers, email addresses, and associated salons or spas; customers should watch for fake appointment or deposit messages.

By HIFY Radar newsroom Updated 11/12/2026 12:30 PM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In 30 seconds

Alleged

A threat actor claims to be selling 423,856 customer records attributed to Planity, a French booking platform for hair, beauty and wellness services. The claim remains unverified, and the available evidence does not confirm that Planity was breached.

What happened

Alleged

DailyDarkWeb reported seeing an offer for a database allegedly taken from Planity. According to the post, the seller advertised customer contact details and links between customers and particular salons or spas.

Why it matters

Inferred

If authentic, the combination of contact details and salon associations could help scammers craft believable messages about appointment changes, deposits or payments. Naming a real business may make a fraudulent request look more convincing.

What to do

Inferred

Planity customers should treat unexpected booking or deposit requests cautiously. Verify them through the platform or the salon's usual contact channel rather than replying, opening links or paying through information supplied in the message.

Confirmed and still uncertain

Observed

The public post establishes that the sale claim was reported, but it does not independently establish the database's authenticity, its origin, when it was obtained, whether anyone bought it or whether Planity's systems were compromised.

What people are saying

Observed

DailyDarkWeb explicitly described the material as an unverified threat-actor claim rather than confirmation of a breach. Its analyst note warned that booking information could support fake appointment-change or deposit messages.

Evolution

Observed

The available evidence captures only the reported sale offer and the warning that followed it. It contains no subsequent validation, company response, regulator notice or technical investigation that changes the claim's status.

Reach

Observed

1 independent groups, 1 updates, and 0 engagements.

Technical detail

Alleged

The advertised fields allegedly include customer names, telephone numbers, email addresses and records connecting customers with specific salons or spas. No passwords, payment data, database samples or evidence of the claimed access method are described in the supplied report.

Sources and evidence

Observed

The evidence consists of one DailyDarkWeb post on X, accompanied by an image and a summary of the alleged listing. Without independent corroboration or a statement from Planity, it supports reporting the existence and contents of the claim, but not treating the claimed breach or customer exposure as confirmed.