Return to forum

mila · August 31, 2022 at 11:50 AM

Hello BreachForums Community,
Today I have uploaded the Boesner Database for you to download, thanks for reading and enjoy!

In March 2019, the French arts & crafts store Boesner suffered a data breach that impacted 78.5k users. The leak led to the exposure of data including Full names, Dates of birth, Email addresses, Physical Addresses and Passwords stored as MD5 hashes (Salt Missing).

Compromised data: Full names, Dates of birth, Email addresses, Physical Addresses, Passwords

ContentsSpoiler

The .7z File's MD5 Hash is 9902916001D563E1B8A5286A23916F62. In total, there are 78570 records. The file is 342.14MB uncompressed and 26.43MB compressed.

Hidden Content

You must register or login to view this content.

Database Index <> How To Get Credits

KmetaNaEvropa · August 31, 2022 at 11:55 AM

(August 31, 2022, 11:50 AM)mila Wrote: boesner.fr France

Lines: address 85355 + customer 78570
Date: 03.2019
Format: sql
Sample:

`bsnr_address` (`id_address`, `id_country`, `id_state`, `id_customer`, `id_manufacturer`, `id_supplier`, `id_warehouse`, `alias`, `company`, `lastname`, `firstname`, `address1`, `address2`, `postcode`, `city`, `other`, `phone`, `phone_mobile`, `vat_number`, `dni`, `date_add`, `date_upd`, `active`, `deleted`)
(19, 8, 314, 13, 0, 0, 0, 'PRIVE', NULL, 'KINSEHER', 'STEPHAN', '17 BIS RUE PIERRE BROSSOLETTE', NULL, '33700', 'MERIGNAC', NULL, NULL, '0661780462', NULL, NULL, '2014-08-20 14:18:35', '2014-08-20 14:18:35', 1, 0),
(40486, 8, 0, 29, 0, 0, 0, '', '', 'M.', 'BARBOTIN JULIEN CHEZ A2V', '15 RUE ARMAND GUIRAUD', 'APT 87 - RESIDENCE LAURELIA', '33320', 'EYSINES', NULL, '0556640183', '', NULL, NULL, '2013-03-11 00:00:00', '2014-09-09 11:23:00', 1, 0),
(40487, 8, 314, 30, 0, 0, 0, '', '', 'KINSEHER', 'Stephan', '170 COURS DU MEDOC', '', '33300', 'BORDEAUX', '', '', '0661780462', '', '', '2013-05-02 00:00:00', '2019-03-05 08:52:00', 1, 0),
(40488, 8, 0, 54, 0, 0, 0, '', '', 'WINTENBERGER', 'PHILIPPE', '12 RUE DOYEN GOSSE', 'LE CARINA', '38400', 'ST MARTIN D HERES', NULL, '04 76 25 43 27', '', NULL, NULL, '2010-06-03 00:00:00', '2019-03-05 08:55:00', 1, 0),
(40489, 8, 314, 56, 0, 0, 0, '', 'AUX COULEURS D\'ALIX', 'FEVRE', 'ALIX', '14 RUE RICHARD WAGNER', '', '33700', 'MERIGNAC', '', '09 53 50 33 87', '06 18 38 86 24', '', '', '2009-02-17 00:00:00', '2019-03-05 08:52:00', 1, 0),
(40490, 8, 0, 59, 0, 0, 0, '', '', 'FORTIER', 'JEAN-LUC', '34 RUE DU BONHOMME EN PIERRE', '', '91000', 'EVRY', NULL, '01 60 77 80 98', '', NULL, NULL, '2008-01-22 00:00:00', '2019-03-05 08:55:00', 1, 0),
(40491, 8, 0, 60, 0, 0, 0, '', '', 'CAYET', 'MURIEL', '12 GRANDE RUE', '', '18290', 'MAREUIL SUR ARNON', NULL, '02 48 69 91 73', '', NULL, NULL, '2006-12-28 00:00:00', '2019-03-05 08:55:00', 1, 0),
(40492, 8, 0, 65, 0, 0, 0, '', '', 'ETCHEVERRY', 'PATRICE', '14 RUE DE LA PIROUETTE', '', '91150', 'ETAMPES', NULL, '05 59 29 82 04', '', NULL, NULL, '2008-09-17 00:00:00', '2014-09-09 11:23:00', 1, 0),
(40493, 8, 0, 71, 0, 0, 0, '', '', 'SCHNEIDER', 'KRISTIN', 'GRAND\'RUE JEAN MOULIN', '', '30430', 'BARJAC', NULL, '04 66 24 53 33', '', NULL, NULL, '2009-03-20 00:00:00', '2019-03-05 08:55:00', 1, 0),
(40494, 8, 339, 74, 0, 0, 0, '', '', 'MANIGA', 'Marie', '258 RUE VENDROME', '', '69003', 'LYON', '', '', '06 87 57 89 95', '', '', '2007-09-04 00:00:00', '2019-03-05 08:55:00', 1, 0),

`bsnr_customer` (`id_customer`, `id_shop_group`, `id_shop`, `id_gender`, `id_default_group`, `id_lang`, `id_risk`, `company`, `siret`, `ape`, `firstname`, `lastname`, `email`, `passwd`, `last_passwd_gen`, `birthday`, `newsletter`, `ip_registration_newsletter`, `newsletter_date_add`, `optin`, `website`, `outstanding_allow_amount`, `show_public_prices`, `max_payment_days`, `secure_key`, `note`, `active`, `is_guest`, `deleted`, `date_add`, `date_upd`, `reset_password_token`, `reset_password_validity`)
(7, 1, 1, 0, 3, 1, 0, NULL, '', '', 'CAMILLE', 'MULLER', '[email protected]', '', '2014-10-01 10:12:13', '0000-00-00', 1, NULL, '2018-01-19 11:28:41', 0, '', 0.000000, 0, 0, '-1', NULL, 1, 0, 0, '2014-09-09 00:00:00', '2019-03-05 08:55:00', NULL, NULL),
(14, 1, 1, 1, 4, 1, 1, NULL, '', '', 'ANTHONY', 'PENET', '[email protected]', 'e5835ea69721643066160fc1b1503504', '2014-09-09 13:06:47', '1984-09-24', 1, NULL, '2017-08-08 03:13:31', 0, '', 0.000000, 0, 0, '8a15feb255721a3157596b37b7cc19de', NULL, 1, 0, 0, '2006-12-28 00:00:00', '2019-03-05 08:52:00', NULL, NULL),
(29, 1, 1, 0, 3, 1, 0, NULL, '', '', 'BARBOTIN JULIEN CHEZ A2V', 'M.', '[email protected]', '', '2014-09-09 13:06:47', '0000-00-00', 0, NULL, '2016-10-06 13:59:19', 0, '', 0.000000, 0, 0, '4253831a7fe286f663ab77ab320b6ed4', NULL, 1, 0, 0, '2013-03-11 00:00:00', '2014-09-09 11:23:00', NULL, NULL),
(30, 1, 1, 1, 4, 1, 0, NULL, '', '', 'Stephan', 'KINSEHER', '[email protected]', 'c8bc61ce399632275364f20f0404ea87', '2014-09-09 13:06:47', '1959-07-28', 1, NULL, '2018-03-11 17:51:31', 0, '', 0.000000, 0, 0, '1ab7dc56739b2d55dfaad44999e48887', NULL, 1, 0, 0, '2013-05-02 00:00:00', '2019-03-05 08:52:00', NULL, NULL),
(54, 1, 1, 1, 3, 1, 0, NULL, '', '', 'PHILIPPE', 'WINTENBERGER', '[email protected]', 'a87b03b2f3f0eb50f7b09f3d962e2bf9', '2014-09-09 13:06:47', '0000-00-00', 1, NULL, '2018-02-03 21:55:59', 0, '', 0.000000, 0, 0, '', NULL, 1, 0, 0, '2010-06-03 00:00:00', '2019-03-05 08:55:00', NULL, NULL),
(56, 1, 1, 2, 4, 1, 1, 'AUX COULEURS D\'ALIX', '78993862800011', '', 'ALIX', 'FEVRE', '[email protected]', '603757b857f9da39b2b3fe1aa8d7e49b', '2014-09-09 13:06:47', '1981-01-31', 0, NULL, '2017-09-02 02:04:50', 0, 'www.auxcouleursdalix.com', 0.000000, 0, 0, '', NULL, 1, 0, 0, '2009-02-17 00:00:00', '2019-03-05 08:52:00', NULL, NULL),
(59, 1, 1, 0, 3, 1, 0, NULL, '', '', 'JEAN-LUC', 'FORTIER', '[email protected]', '', '2014-09-09 13:06:47', '0000-00-00', 1, NULL, '2017-08-26 13:52:32', 0, '', 0.000000, 0, 0, 'c3c277a105fcf908d54f8fdce090b9a7', NULL, 1, 0, 0, '2008-01-22 00:00:00', '2019-03-05 08:55:00', NULL, NULL),
(60, 1, 1, 0, 3, 1, 0, NULL, '', '', 'MURIEL', 'CAYET', '[email protected]', '', '2014-09-09 13:06:47', '0000-00-00', 1, NULL, '2017-05-23 02:04:05', 0, '', 0.000000, 0, 0, '14455ce415fe975a82f94c5d3634e2db', NULL, 1, 0, 0, '2006-12-28 00:00:00', '2019-03-05 08:55:00', NULL, NULL),
(65, 1, 1, 0, 3, 1, 0, NULL, '', '', 'PATRICE', 'ETCHEVERRY', '[email protected]', '', '2014-09-09 13:06:47', '0000-00-00', 0, NULL, '2017-05-19 02:01:52', 0, '', 0.000000, 0, 0, '2f3cdb4ad5154bc6b1627739ff62b01b', NULL, 1, 0, 0, '2008-09-17 00:00:00', '2014-09-09 11:23:00', NULL, NULL),
(71, 1, 1, 0, 3, 1, 0, NULL, '', '', 'KRISTIN', 'SCHNEIDER', '[email protected]', '', '2014-09-09 13:06:48', '0000-00-00', 1, NULL, '2018-01-19 13:29:54', 0, '', 0.000000, 0, 0, '69f0ba4942c57be5384ca25fdef6f5f9', NULL, 1, 0, 0, '2009-03-20 00:00:00', '2019-03-05 08:55:00', NULL, NULL),
(74, 1, 1, 0, 3, 1, 0, NULL, '', '', 'Marie', 'MANIGA', '[email protected]', '0d4c11a8d0e36792d0826b0b5274050f', '2018-03-04 21:54:42', '0000-00-00', 0, NULL, '2016-12-22 09:48:30', 0, '', 0.000000, 0, 0, 'b909b8dbd0860e77e668676264c72720', NULL, 1, 0, 0, '2007-09-04 00:00:00', '2019-03-05 08:55:00', NULL, NULL),
(75, 1, 1, 0, 3, 1, 0, NULL, '', '', 'TRACEY', 'JOHNSON', '[email protected]', '', '2014-09-09 13:06:48', '0000-00-00', 1, NULL, '2017-05-24 09:30:17', 0, '', 0.000000, 0, 0, '942da2775810220350b784d63e5e9dfe', NULL, 1, 0, 0, '2007-05-04 00:00:00', '2019-03-05 08:55:00', NULL, NULL),

Hey,
can you provide more info about how the breach happened and etc.
Thanks for the sample.

mila · August 31, 2022 at 12:02 PM

(August 31, 2022, 11:55 AM)Color Wrote: Hey,
can you provide more info about how the breach happened and etc.
Thanks for the sample.

Unfortunately not. I found it while analyzing the archives

God · September 2, 2022 at 8:31 PM

Do you know the salt for this leak?

mila · September 5, 2022 at 6:58 AM

(September 2, 2022, 08:31 PM)God Wrote: Do you know the salt for this leak?

No. Everything that is on this database is inside

pompompurin · September 12, 2022 at 9:07 PM

(August 31, 2022, 12:02 PM)mila Wrote:
(August 31, 2022, 11:55 AM)Color Wrote: Hey,
can you provide more info about how the breach happened and etc.
Thanks for the sample.

Unfortunately not. I found it while analyzing the archives

iirc it was an exposed backup. Could be wrong tho