Minefield data breach (Jun 2015): what to do?

What leaked

dates of birthemail addressesIP addressespasswordsusernameswebsite activity

Are you affected?

Search for your email address on Have I Been Pwned: if it appears in the Minefield breach, your data are part of it. Your email never goes through ShredRGPD.

Search for my email (new tab)Breach page on HIBP (new tab)

What to do now?

Your action plan

0 / 6 done

Change the password of every account concernedAnd everywhere you reused it: attackers try the same password on other websites.
Turn on two-factor authenticationFirst on your email, your bank and your social networks.
Use a different password for each websiteA password manager helps you remember them. ShredRGPD can create a strong one.Test or create a password
Be wary of emails that mention the breachDo not click unexpected links. Report phishing to Signal Spam (French service).What to do about a suspicious message
Watch out for letters and procedures in your nameThis information is used to make scams more convincing.
Ask the companies what leakedThey must reply within one month (Article 12(3) GDPR).

Your progress stays in this browser.

A message that mentions the breach, a call “from your bank”? See what to do on What to do?.

Write to Minefield

The GDPR lets you ask the company what data it holds about you and what leaked (Articles 15 and 34), or to erase your data (Article 17). It has one month to reply (Article 12(3)).

Ask what leaked Request erasure

The contact of the data protection officer (DPO) is usually in the privacy policy of minefield.fr. The letters are indicative templates, not legal advice.

Information: Have I Been Pwned (new tab), under the CC BY 4.0 (new tab) licence, updated on 30 October 2026. This is public information about the breach, not the breached data. Logos provided by Have I Been Pwned. Trademarks belong to their owners; ShredRGPD has no connection with these companies.