The key facts

  • A cyberattack on Maileva (Docaposte, La Poste group) occurred in mid-September
  • Data of about 22 million people was affected — roughly a third of France's population
  • Among those affected are social housing providers, laboratories, and patients of the Foch hospital in Suresnes

One of the largest breaches in French history

A cyberattack on Maileva, the digital division of France's national postal operator La Poste Group, led to the compromise of personal data of approximately 22 million people. This was reported on Sunday by the French newspapers Le Figaro and La Tribune, citing data from the Cyberattaque.org platform. French media describe the breach as one of the largest in the country's history: it affects roughly a third of the population.

Who was affected

According to the outlets, the hack occurred in mid-September. Those affected include social housing providers, including Flandre Opale Habitat and Alteal, medical laboratories, as well as patients of the Foch hospital in Suresnes. The attackers gained access to the contents of some payment reminder letters: invoice numbers, treatment dates, and amounts owed became known.

The company's response

Maileva reported the incident to the French data protection regulator — the National Commission on Informatics and Liberty (CNIL) — and filed an official criminal complaint. The company stated that all affected corporate clients have been notified in accordance with the law and that a judicial investigation is currently underway. Maileva serves more than 70,000 corporate clients, handling the mailing of payslips, invoices, and registered letters.