Takealot: customer contact database offered on DarkForums

Overview

On April 2, 2026, a DarkForums user operating as Grubder offered a dataset described as 587,000 customer records from Takealot, South Africa's largest online retailer. The seller presents the data as fresh and organized across three sections: customer contacts, support tickets, and order delivery logs. The poster is an established forum member with 93 posts and is asking $1,000 for the full dataset.

What was published

The listing describes three datasets claimed to originate from Takealot's systems:

• Customer contacts with full name, email, phone and fax numbers, postal code, street address, company, account tier and marketing preferences
• Support tickets with subject lines, descriptions and priority flags
• Order delivery logs with delivery addresses, attempts, shipment tracking numbers, courier names and delivery outcomes

Sample files are offered through file hosts, with the seller asking $1,000 and accepting forum escrow.

Risks for affected individuals

Customers whose contact details appear in the dataset face phishing, targeted scams and spam, since email, phone and postal address are combined in one record. Delivery information could be used in parcel-related fraud attempts.

What remains unknown

• Takealot has not publicly commented on the claim
• The exact number of unique individuals is not confirmed
• It is unclear when the data was collected and whether it is current

What affected people should do

South African shoppers who use Takealot should watch for unexpected emails or calls asking for credentials or payments, and report suspicious messages. Anyone contacted with details matching this dataset should change account passwords and enable two-factor authentication.