SPORT BOUTIQ Listed by 8base Ransomware Group

On January 7, 2025, French family-owned ski retailer Sport Boutiq appeared on the leak site of the 8base ransomware group, with internal files exfiltrated during a ransomware attack.

What's Publicly Reported from Reporting

Public reporting indicates that 8base listed Sport Boutiq, a business operating in Méribel, France, since 1947. The company sells and rents winter sports equipment, clothing, shoes, and accessories for men, women, and children. Available reporting describes the incident as a ransomware attack in which internal files were allegedly exfiltrated. The exact number of people whose data may have been exposed remains unknown, and the specific types of records taken have not been publicly detailed beyond the broad category of internal files. The listing appeared on the group’s leak site, which is typically used to pressure victims into paying to prevent further release of stolen data.

Why This Matters for You and Your Family

When a local business like Sport Boutiq suffers a breach, the people affected are often ordinary customers — families who rented skis for a holiday, bought boots for their children, or joined a ski club that purchased gear through the shop. Internal files can contain names, addresses, phone numbers, email addresses, payment details, and purchase histories that stretch back years. Once that information leaves the company’s control, it can be sold, traded, or used to target you with fraud, phishing, or identity theft. For families, the risk is multiplied because one parent’s data frequently links to a spouse and children through shared addresses, family email accounts, or joint purchases.

Credential leaks from retail systems often cascade into other accounts. If you reused a password at Sport Boutiq that you also use for email, banking, or online shopping, attackers can move quickly from one breach to many. Children’s information tied to family bookings or junior equipment rentals can also surface, creating long-term exposure.