Actor claims leak of Waffle Factory customer and order database
A threat actor has released a 16.7 MB compressed SQL dump they claim belongs to Waffle Factory, a French waffle restaurant chain, holding customer records and order history. The actor says an unsecured database backup sat on a production server and credentials came from an exposed configuration file. The claim is unverified; if authentic, customers should expect phishing referencing their orders.
What happened
An actor has publicly released a 16.7 MB file they claim holds the customer database and order history of Waffle Factory, a French waffle restaurant chain. The actor says an unsecured backup sat on a production server, with credentials pulled from an exposed configuration file. Waffle Factory has not confirmed the case.
Why it matters
If authentic, customer and order data is exposed and can fuel phishing that cites real orders. There is no official confirmation, and the true scope is unknown. For the company, there is risk to customer trust and possible personal-data obligations.
What to do
Do not treat the file as authentic without verification and watch for an official statement from Waffle Factory. As general practice: keep backups out of web-reachable folders and rotate credentials stored in configuration files.
For the technical team
- Affected
- Waffle Factory Banco de dados de clientes e pedidos da Waffle Factory, rede francesa de restaurantes de waffles · Customer and order database attributed to Waffle Factory (actor claim, unconfirmed).
- Exploitation
- 16.7 MB compressed SQL dump released publicly by a threat actor, reported by DailyDarkWeb. Unverified claim; the source states it is not confirmation of a breach.
- Fix
- No fix applicable. Mitigation cited by the source: keep backups out of web-reachable folders and rotate credentials stored in config files.
- Vector
- Unsecured database backup on a production server, per the actor's claim. Database credentials pulled from an exposed configuration file. No technical detail beyond the claim.
- More details
- Claimed dump contents: customer records and order history. Source: DailyDarkWeb on X. Source analyst note: if authentic, expect phishing referencing customer orders.
Timeline
Incident opened.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
