colec.fr
Disclosed Sep 30, 2026
Data breach of colec.fr, a French B2B SaaS platform (appears to be a circular economy / waste management / reuse network tool). The archive contains a full database dump including: CRM company records with sales pipeline states, partner listings with contact details and geolocation data, Supabase authentication logs with user email addresses and session tokens, and document photos. Data spans from 2024 through 2026, suggesting this is a relatively recent breach of a live production database.
Data found in this dataset
Search this dataset
Team members search this dataset here and through the API. Access is by invitation from your team admin, or by request.
Source files
Expand any file to inspect its column headers and the field each maps to.
colec.fr/local_crm/public/companies.csv0 rows
colec.fr/local_crm/public/companies_state_logs.csv0 rows
colec.fr/local_crm/public/listing_partenaires_total_20260217091741.csv5 columns195 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
| Source column | Mapped field | Confidence |
|---|---|---|
| 1 | emailText | high |
| free-text column with embedded emails (3/142 cells, 2% density) | ||
| 4 | address1 | high |
| header "adresse" resolves to PII field "address1" | ||
| 8 | emailText | high |
| free-text column with embedded emails (43/98 cells, 44% density) | ||
| 9 | emailText | high |
| free-text column with embedded emails (19/69 cells, 28% density) | ||
| 10 | emailText | high |
| free-text column with embedded emails (3/68 cells, 4% density) | ||
Notes: Heuristic auto-detection: header-named PII columns confirmed by data conformance
colec.fr/supabase/auth/audit_log_entries__records.csv3 columns40,359 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
| Source column | Mapped field | Confidence |
|---|---|---|
| 4 | high | |
| unlabeled column — sampled values parse as email addresses | ||
| 10 | skip | high |
| header "payload.traits.user_email" resolves to PII field "email" | ||
| 12 | skip | high |
| header "payload.traits.user_phone" resolves to PII field "phone" | ||
Notes: Heuristic auto-detection: header-named PII columns confirmed by data conformance
colec.fr/supabase/auth/flow_state.csv0 rows
colec.fr/supabase/auth/identities__records.csv2 columns2,223 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
| Source column | Mapped field | Confidence |
|---|---|---|
| 3 | high | |
| header "identity_data.email" resolves to PII field "email" | ||
| 10 | high | |
| header "email" resolves to PII field "email" | ||
Notes: Heuristic auto-detection: header-named PII columns confirmed by data conformance
colec.fr/supabase/auth/mfa_amr_claims.csv0 rows
colec.fr/supabase/auth/one_time_tokens.csv1 column46 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
| Source column | Mapped field | Confidence |
|---|---|---|
| 4 | high | |
| unlabeled column — sampled values parse as email addresses | ||
Notes: Heuristic auto-detection: header-named PII columns confirmed by data conformance
colec.fr/supabase/auth/refresh_tokens.csv0 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
Notes: No PII columns detected in the provided rows. The data appears to consist of internal system identifiers, tokens, and timestamps, none of which qualify as personally identifiable information under the defined categories.
colec.fr/supabase/auth/schema_migrations.csv0 rows
File structure
Notes: free-form text with embedded timestamps only; no PII present
colec.fr/supabase/auth/sessions.csv0 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
Notes: No PII columns present; all are internal IDs, timestamps, IP addresses, or software metadata.
colec.fr/supabase/auth/users__records.csv2 columns2,223 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
| Source column | Mapped field | Confidence |
|---|---|---|
| 4 | high | |
| 37 | high |
Notes: Only columns 4 and 37 contain valid email addresses; other columns are internal IDs, timestamps, or flags and are excluded per rules.
colec.fr/supabase/public/address__records.csv3 columns577 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
| Source column | Mapped field | Confidence |
|---|---|---|
| 2 | address1 | high |
| header "address" resolves to PII field "address1" | ||
| 3 | zip | high |
| header "postcode" resolves to PII field "zip" | ||
| 4 | city | high |
| header "city" resolves to PII field "city" | ||
Notes: Heuristic auto-detection: header-named PII columns confirmed by data conformance
colec.fr/supabase/public/animator.csv2 columns96 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
| Source column | Mapped field | Confidence |
|---|---|---|
| 4 | address1 | high |
| header "address" resolves to PII field "address1" | ||
| 6 | phone | high |
| header "phone" resolves to PII field "phone" | ||
Notes: Heuristic auto-detection: header-named PII columns confirmed by data conformance
colec.fr/supabase/public/animator_review__records.csv2 rows
File structure
Notes: Unstructured fallback: no PII columns mapped, but the raw text carries emails
colec.fr/supabase/public/anonymous_voucher_distribution.csv2 columns6 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
| Source column | Mapped field | Confidence |
|---|---|---|
| 3 | firstName | high |
| 4 | fullName | high |
Notes: Columns 3 and 4 contain first names and full names respectively. All other columns are internal IDs, timestamps, or transactional data and do not contain PII.
colec.fr/supabase/public/association__records.csv0 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
Notes: No PII columns detected. All columns are internal IDs, timestamps, company names, descriptions, URLs, types, flags, or impact stats. No personal contact details present.
colec.fr/supabase/public/association_donation.csv0 rows
colec.fr/supabase/public/bill__records.csv0 rows
colec.fr/supabase/public/bin_transfer_log.csv0 rows
colec.fr/supabase/public/bins__records.csv0 rows
colec.fr/supabase/public/colec_user.csv4 columns2,159 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
| Source column | Mapped field | Confidence |
|---|---|---|
| 2 | lastName | high |
| 3 | firstName | high |
| 4 | high | |
| 5 | city | high |
Notes: PII columns: first_name, mail, city, name. Omitted columns are non-PII or internal identifiers (created_at, updated_at, id, rgpd_consent, fcm_token, fcm_token_updated_at).
colec.fr/supabase/public/collector__records.csv1 column45 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
| Source column | Mapped field | Confidence |
|---|---|---|
| 5 | phone | high |
Notes: Only column 5 (phone) is PII; others are internal IDs, timestamps, company names, status flags, or numerical codes.
colec.fr/supabase/public/condition.csv0 rows
colec.fr/supabase/public/customer__records.csv1 column37 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
| Source column | Mapped field | Confidence |
|---|---|---|
| 2 | phone | high |
Notes: Only column 2 (index 2) contains phone numbers. No other columns contain identifiable PII.
colec.fr/supabase/public/customer_member.csv0 rows
colec.fr/supabase/public/customer_site.csv0 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
Notes: No PII columns detected. All columns appear to be location identifiers, UUIDs, or internal reference codes. No emails, phone numbers, names, addresses, DOBs, SSNs, passwords, usernames, or other PII fields are present in the sample.
colec.fr/supabase/public/donation__records.csv0 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
Notes: No PII columns detected; all present columns are internal IDs, timestamps, flags, or links.
colec.fr/supabase/public/donation_place__records.csv0 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
Notes: No PII columns detected. All entries represent location records with UUIDs, coordinates, and timestamps — no personal identifiers present.
colec.fr/supabase/public/equipment__records.csv0 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
Notes: No PII columns detected. All columns are internal IDs, timestamps, status codes, or metadata flags. No personal data such as names, emails, addresses, or phone numbers is present in the sample.
colec.fr/supabase/public/equipment_transfer.csv0 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
Notes: All columns are internal IDs, timestamps, or status flags; no PII present.
colec.fr/supabase/public/extra_points__records.csv0 rows
colec.fr/supabase/public/gsranimator.csv2 columns4 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
| Source column | Mapped field | Confidence |
|---|---|---|
| 4 | address1 | high |
| header "address" resolves to PII field "address1" | ||
| 5 | phone | high |
| header "phone" resolves to PII field "phone" | ||
Notes: Heuristic auto-detection: header-named PII columns confirmed by data conformance
colec.fr/supabase/public/incentiver__records.csv1 column149 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
| Source column | Mapped field | Confidence |
|---|---|---|
| 3 | phone | high |
Notes: Only column 3 contains PII (phone numbers). All other columns are internal IDs, timestamps, company names, flags, URLs, or empty. No email, name, address, dob, ssn, password, username, country, gender, suffix, or facebookId columns are present.
colec.fr/supabase/public/intendant.csv3 columns96 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
| Source column | Mapped field | Confidence |
|---|---|---|
| 2 | firstName | high |
| header "first_name" resolves to PII field "firstName" | ||
| 3 | lastName | high |
| header "last_name" resolves to PII field "lastName" | ||
| 4 | phone | high |
| header "phone" resolves to PII field "phone" | ||
Notes: Heuristic auto-detection: header-named PII columns confirmed by data conformance
colec.fr/supabase/public/item__records.csv0 rows
colec.fr/supabase/public/item_category.csv0 rows
colec.fr/supabase/public/item_issue.csv0 rows
colec.fr/supabase/public/item_part.csv0 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
Notes: The provided data is unstructured and does not contain any PII fields. The file appears to be a list of items with IDs and names, but no personal information is present.
colec.fr/supabase/public/item_type.csv0 rows
colec.fr/supabase/public/key_store.csv0 rows
colec.fr/supabase/public/label_format_presets.csv0 rows
colec.fr/supabase/public/notification_log__records.csv16 columns209 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
| Source column | Mapped field | Confidence |
|---|---|---|
| 22 | high | |
| 24 | high | |
| 26 | high | |
| 27 | high | |
| 28 | lastName | high |
| 29 | firstName | high |
| 30 | fullName | high |
| 31 | phone | high |
| 32 | phone | high |
| 33 | phone | high |
| 34 | phone | high |
| 35 | phone | high |
| 36 | lastName | high |
| 37 | firstName | high |
| 38 | phone | high |
| 41 | address1 | high |
Notes: Notification/email payload log from Colec SaaS platform; 16 PII columns extracted from template variables and email metadata.
colec.fr/supabase/public/opening_hours.csv0 rows
colec.fr/supabase/public/owned_voucher__records.csv0 rows
colec.fr/supabase/public/prestation__records.csv120 rows
File structure
Notes: Unstructured fallback: no PII columns mapped, but the raw text carries emails
colec.fr/supabase/public/prestation_animator_application.csv0 rows
colec.fr/supabase/public/prestation_animator_offer.csv0 rows
colec.fr/supabase/public/prestation_bill_waiver.csv0 rows
colec.fr/supabase/public/prestation_expense__records.csv0 rows
colec.fr/supabase/public/prestation_incident.csv0 rows
colec.fr/supabase/public/prestation_revenue__records.csv0 rows
colec.fr/supabase/public/quiz_answer.csv0 rows
colec.fr/supabase/public/quiz_participation.csv0 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
Notes: No PII columns detected; all columns are internal IDs, timestamps, or non-PII identifiers.
colec.fr/supabase/public/quiz_proposition.csv0 rows
colec.fr/supabase/public/quiz_question.csv0 rows
colec.fr/supabase/public/quiz_session.csv0 rows
colec.fr/supabase/public/repair_item_state.csv0 rows
colec.fr/supabase/public/repair_workshop.csv0 rows
colec.fr/supabase/public/repairer__records.csv2 columns5 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
| Source column | Mapped field | Confidence |
|---|---|---|
| 5 | address1 | high |
| header "address" resolves to PII field "address1" | ||
| 6 | phone | high |
| header "phone" resolves to PII field "phone" | ||
Notes: Heuristic auto-detection: header-named PII columns confirmed by data conformance
colec.fr/supabase/public/role_permissions.csv0 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
Notes: No PII columns detected. All entries are role-based permissions for a B2B SaaS platform, with no personal identifiers, contact details, or sensitive data.
colec.fr/supabase/public/site_infos__records.csv1 column5 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
| Source column | Mapped field | Confidence |
|---|---|---|
| 8 | emailText | high |
| free-text column with embedded emails (5/46 cells, 11% density) | ||
Notes: Heuristic auto-detection: header-named PII columns confirmed by data conformance
colec.fr/supabase/public/transaction.csv0 rows
colec.fr/supabase/public/transporter.csv2 columns5 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
| Source column | Mapped field | Confidence |
|---|---|---|
| 4 | address1 | high |
| header "address" resolves to PII field "address1" | ||
| 5 | phone | high |
| header "phone" resolves to PII field "phone" | ||
Notes: Heuristic auto-detection: header-named PII columns confirmed by data conformance
colec.fr/supabase/public/user_roles.csv0 rows
colec.fr/supabase/public/validation_codes.csv0 rows
colec.fr/supabase/public/voucher__records.csv0 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
Notes: No PII columns identified; all columns are internal IDs, timestamps, or non-personal descriptors.
colec.fr/supabase/public/voucher_type.csv0 rows
File structure
Notes: free-form text with no consistent column structure
colec.fr/supabase/storage/buckets__records.csv0 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
Notes: No PII columns present; all columns are internal IDs, timestamps, flags, or non-PII status fields.
colec.fr/supabase/storage/migrations.csv0 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
Notes: File contains only migration table records: id,name,hash,executed_at — no PII present. This is a database schema change log, not user data.
colec.fr/supabase/storage/objects__records.csv0 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
Notes: No PII found. All columns are internal IDs, timestamps, metadata, or flags. No emails, names, addresses, phones, DOB, SSN, or passwords present in the sample.