What is "Boulangerie Ange" ?
=627=justifyFounded=justify2008 =justifyHeadquarters=justifyAix-en-Provence, France =justifyNumber of Stores (2026)=justify300+ bakeries across France (as of early 2026) =justifyNumber of Franchisees=justify158 =justifyEmployees=justify6,000+ =justifyAnnual Revenue (2024)=justify€398 million (excluding tax) =justifyBaguettes Sold Annually=justify66 million =justifyRegistered Users=justifyMore than 800'000
How "Ange" was dumped ?
Really simple. It's a basic Authorization token previously located in the headers of few requests located in a "Ange" subdomain.(Is still active and can be attacked at any moment)
This token was enough to dump almost the entire database by accessing it via the classic api.
What is the format of this database ? How many users are affected ? When was this database dumped ?
lastname:firstname:phone:city
A little more than 812'000 users.
This database has been dump less than a month.
Proof of this dump (first 1k lines) :
TXT File :
https://ibb.co/YBs8ZQ8dDump proof screenshot : https://ibb.co/vyMgPcp
What is the price for this database ?
The actual price is 500$ pm for more information.
Salutations à Johanna Brousse et à Clement Domingo.
Really simple. It's a basic Authorization token previously located in the headers of few requests located in a "Ange" subdomain.(Is still active and can be attacked at any moment)
This token was enough to dump almost the entire database by accessing it via the classic api.
What is the format of this database ? How many users are affected ? When was this database dumped ?
lastname:firstname:phone:city
A little more than 812'000 users.
This database has been dump less than a month.
Proof of this dump (first 1k lines) :
TXT File :
https://ibb.co/YBs8ZQ8dDump proof screenshot : https://ibb.co/vyMgPcp
What is the price for this database ?
The actual price is 500$ pm for more information.
Salutations à Johanna Brousse et à Clement Domingo.
