15.11.2026 18:31
It was announced that the personal data of 22 million people were seized in a cyber attack targeting Maileva, a subsidiary of La Poste, France's postal service. While the toll of the attack, which occurred in September, was confirmed two months later, it was reported that the stolen information included first names, surnames, and postal addresses.
France has faced one of the largest personal data breaches in the country's history. In a cyberattack targeting the Maileva platform, which operates under La Poste, the personal data of approximately 22 million people was stolen. The company announced that the attack took place in mid-September, while the scale of the incident was made public on November 14.
LA POSTE'S SUBSIDIARY WAS AMONG THE ATTACK'S TARGETS
The cyberattack targeted the Maileva platform, a subsidiary of Docaposte, which is part of France's state postal service La Poste. The platform, used by companies, hospitals, and public institutions, enables the sending of payslips, invoices, registered letters, and official correspondence.
In a statement by La Poste, it was stated that as a result of the attack, the information of 22 million people to whom mail was sent via the platform was obtained. It was emphasized that these people are not direct Maileva customers, but rather individuals to whom institutions and companies using the platform sent correspondence.
FIRST NAMES, LAST NAMES, AND POSTAL ADDRESSES WERE STOLEN
According to Maileva's statement, the information obtained in the attack includes people's first names, last names, and postal addresses. The company reported that bank information and payment data were not affected by the attack.
The data breach, which concerns approximately 22 million people, corresponds to about one-third of France's population.
A REPORT WAS MADE TO CNIL, AND A CRIMINAL COMPLAINT WAS FILED
La Poste announced that following the attack, a report was made to France's data protection authority CNIL and a criminal complaint was filed. It was reported that a judicial investigation was launched into the incident.
Who is behind the attack has not yet been disclosed.
BEWARE OF FAKE MAIL AND FRAUD RISK
One of the risks highlighted by experts is that the stolen information could be used in targeted fraud attempts. It is noted that attackers could use real first names, last names, and address information to prepare fake invoices, payment requests, or official correspondence that appear credible.
Maileva announced that it informed the client institutions and companies affected by the incident. People whose data was stolen should be cautious about suspicious mail, phone calls, and email messages reaching them