Newsletters
A cyberattack on Maileva, a digital subsidiary of France’s national postal operator La Poste Group, exposed the personal data of about 22 million people, French media reported Sunday.
La Poste confirmed on Saturday that the attack, which took place in mid-September, exposed the first names, last names and postal addresses of people who receive mail that Maileva sends on behalf of its corporate clients.
French dailies Le Figaro and La Tribune reported that the platform suffered a large-scale intrusion. The number affected equals roughly one-third of France’s population, and French media described the breach as one of the largest data leaks ever recorded in the country.
Maileva is a brand of Docaposte, itself a subsidiary of La Poste, and handles the dispatch of payslips, invoices and registered mail for more than 70,000 corporate clients. It sent 180 million documents in 2024.
Reports citing the cybersecurity platform Cyberattaque.org said the breach affected social housing providers, including Flandre Opale Habitat and Alteal, as well as medical laboratories and patients of Foch Hospital in Suresnes.
Le Figaro and La Tribune reported that hackers accessed the contents of some payment reminder letters, exposing invoice numbers, treatment dates and amounts owed. La Poste’s statement to AFP referred only to names and postal addresses.
The intrusion was detected on Sept. 23, when Maileva suspended its services as a precaution. They resumed on Sept. 29 after an interruption of six days.
Maileva reported the incident to France’s data protection authority, the National Commission for Information Technology and Civil Liberties (CNIL), and filed a formal criminal complaint. The company said all affected corporate clients have been notified in line with legal requirements and that a judicial investigation is under way.
Set as preferred source
Set as preferred source
1 min read
1 min read
