Massive Cyberattack Hits French Post Subsidiary, Leaking Data of 22 Million People

One of the Largest Data Breaches in France

France's La Poste Group announced on Saturday, November 14, that its subsidiary "Maileva" was hit by a large-scale cyberattack in mid-September, leading to the theft of personal data belonging to approximately 22 million individuals, in what has been described as one of the largest data breaches ever recorded in France.

Vital Sectors Affecting Daily Life

The stolen data included individuals' full names and postal addresses. Available information indicates that the theft affected thousands of companies using the platform, particularly organizations operating in sectors closely linked to the daily lives of residents and citizens, such as social housing (logement social), healthcare, and public utilities and services.

Judicial Investigation and Official Procedures

La Poste Group explained that Maileva promptly notified the National Commission on Informatics and Liberty (CNIL) of the incident and filed an official complaint, confirming that a judicial investigation is currently underway to determine the circumstances of the attack and those responsible. The group added that, in compliance with applicable laws and regulations, all affected institutions and companies were immediately notified.

It is worth noting that Maileva is a subsidiary of Docaposte, which is owned by La Poste Group. It is a leading platform specialized in routing and sending professional correspondence for small and medium-sized enterprises, such as pay slips, registered letters, invoices, and official notices for general meetings; the platform attracts more than 70,000 users and recorded the dispatch of 180 million documents during 2024.