Pemiblanc data breach (Apr 2018): what to do?

What leaked

email addressespasswords

Have I Been Pwned could not confirm this breach with the company.

Are you affected?

Search for your email address on Have I Been Pwned: if it appears in the Pemiblanc breach, your data are part of it. Your email never goes through ShredRGPD.

Search for my email (new tab)Breach page on HIBP (new tab)

What to do now?

Your action plan

0 / 4 done

Change the password of every account concernedAnd everywhere you reused it: attackers try the same password on other websites.
Turn on two-factor authenticationFirst on your email, your bank and your social networks.
Use a different password for each websiteA password manager helps you remember them. ShredRGPD can create a strong one.Test or create a password
Be wary of emails that mention the breachDo not click unexpected links. Report phishing to Signal Spam (French service).What to do about a suspicious message

Your progress stays in this browser.

A message that mentions the breach, a call “from your bank”? See what to do on What to do?.

Who to write to?

Have I Been Pwned could not confirm that these data come from pemiblanc.com. So there may be no responsible company to write to: a letter may go unanswered.

The priority: change the password of every account where you used the one that leaked. Test your passwords without handing them to anyone.

If you think pemiblanc.com does hold your data, you can still ask what it has about you (Article 15 GDPR) or request erasure (Article 17).

Ask what leaked Request erasure

The contact of the data protection officer (DPO) is usually in the privacy policy of pemiblanc.com. The letters are indicative templates, not legal advice.

Information: Have I Been Pwned (new tab), under the CC BY 4.0 (new tab) licence, updated on 30 October 2026. This is public information about the breach, not the breached data. Logos provided by Have I Been Pwned. Trademarks belong to their owners; ShredRGPD has no connection with these companies.