Massive Data Breach at Colis Privé Exposes Personal Information of Over 10 Million French Citizens In a troubling escalation of last year’s cyberattack on Colis Privé, a cybersecurity expert known as seblatombe revealed that the personal data of over 10 million French citizens including 500 public sector employees has surfaced on the dark web. The exposed information, now freely accessible, includes names, postal and email addresses, phone numbers, and package details (type, weight, and status), raising serious concerns about targeted fraud and identity theft. The breach originated in November 2023, when Colis Privé disclosed a "limited unauthorized access" to its systems, initially downplaying the incident by stating that no financial data, passwords, or sensitive information had been compromised. However, seblatombe’s findings confirm that 22 million records far exceeding the company’s initial assessment are now circulating in underground forums. Among the victims are government employees from agencies such as the Ministry of the Interior, Education, and the Gendarmerie, identifiable by their professional email addresses. The leaked data, which remains recent (dating to the November breach), provides cybercriminals with a trove of details to craft highly convincing phishing scams. Fraudsters could impersonate trusted entities, using real package numbers or personal information to deceive victims into clicking malicious links or divulging further sensitive data. The risk extends to SMS-based scams and identity fraud, with attackers potentially leveraging the exposed details to bypass security measures. Colis Privé has yet to respond to requests for comment on the latest developments. The incident underscores the long-term fallout of data breaches, where initial assurances of limited exposure often prove inaccurate as stolen information resurfaces in criminal markets.

Colis Privé announces that it has been the victim of a computer attack. The company stated that they experienced extended delivery times. Colis Privé also did not specify whether the hackers managed to steal customer data. However, it is not possible to track parcels on the company's website at this time.