La Poste Subsidiary Maileva Reports Major Data Breach Affecting Millions

Cyberattack Confirmed at Maileva

Maileva, a subsidiary of the French postal group La Poste specializing in digital mail and document management services, has officially confirmed that it was the target of a major cyberattack. The incident has resulted in the exposure of personal contact data for a significant number of users, estimated at 22 million people.

Scope of the Data Breach

The breach involved the unauthorized access to databases containing sensitive contact information. According to preliminary reports and statements from the organization, the compromised data primarily includes:

• Full names
• Email addresses
• Postal addresses
• Telephone numbers

The company has stated that the incident did not involve the theft of banking information or passwords, as those systems are managed separately from the affected database.

Response and Security Measures

Upon discovering the intrusion, Maileva initiated emergency security protocols to contain the threat and prevent further unauthorized access. The company has taken the following steps:

• Notifying the CNIL (Commission Nationale de l'Informatique et des Libertés), the French data protection authority.
• Launching a comprehensive forensic investigation to determine the origin and method of the attack.
• Informing affected clients and partners about the nature of the exposed information.

A spokesperson for the group noted, 'We have mobilized all necessary resources to secure our systems and are working closely with cybersecurity experts to address this vulnerability.'

Ongoing Investigation

Authorities in France are currently investigating the breach to identify the perpetrators behind the attack. As the situation develops, affected individuals are being advised to remain vigilant against potential phishing attempts or unsolicited communications that may leverage the stolen contact details. The company continues to cooperate fully with law enforcement and regulatory bodies to ensure compliance with data protection regulations.