Monoprix Tunisie listed by the Stormous ransomware group

Overview

The Stormous ransomware group has listed Monoprix Tunisie, a Tunisian supermarket and retail chain, on its leak site. The listing appeared on 28 June 2026, with the group describing the data description as pending update.

What was published

The group has listed the retailer as a victim but has not yet published data details. Retail chains typically hold customer profiles, loyalty records and payment information, which are the likely contents of any exfiltration.

Risks for affected individuals

• Customer personal data may be exposed.
• Loyalty and payment records could enable fraud.
• Employees' records may be included.

What remains unknown

• Whether data has been exfiltrated.
• The volume of records involved.
• The timeline of any release.

What affected people should do

Customers should monitor payment cards and be cautious of phishing referencing the retailer. The company should notify customers and staff, review compromised systems, and advise password changes for loyalty accounts.