ShredRGPDFR
Write my letter
Data breach

SFR data breach

SFR (sfr.fr) suffered a data breach on 2 July 2026. Here is what leaked, how to find out whether you are affected, and what to do.

Medium risk

Indicative guide: high if passwords, bank details, ID documents or health data leaked; medium if a phone number, address or date of birth; low otherwise.

Breach date
2 July 2026
Types of data
6
Made public on
20 August 2026

What leaked

salutationsnamesphysical addressesphone numberscontract IDstechnical line data

Are you affected?

No website lets you check: this breach is not on Have I Been Pwned. On 20 August 2026, SFR notified the subscribers concerned, SFR and RED by SFR fibre customers. Also look in your spam folder, on the email address linked to your account.

You received nothing but you have fibre with SFR or RED? Ask SFR what data it holds about you and what leaked: this is your right of access (Article 15 GDPR).

What happened

Someone used a hijacked legitimate account to get into an internal SFR tool used to manage fibre connections. SFR spotted the incident on 2 July 2026 and only notified its subscribers on 20 August. A hacker claims about 2.1 million lines; SFR has not given any figure.

According to SFR’s letter, the data concerned are title, last name, first name, postal address, mobile number, contract ID and technical data about the line. According to SFR, neither passwords nor bank details are concerned.

SFR notified the CNIL and filed a complaint with the public prosecutor.

The real risk: the fake technician

With your name, address, number and contract ID, a scammer can call you pretending to be SFR or a fibre technician, and read your own details back to you to win your trust. The goal: get you to install remote-control software, read out a code received by text message or “settle an unpaid bill”.

Never give out a code received by text message and do not install anything at a caller’s request. Hang up, then call SFR yourself on the number shown on your bill or in your customer account. Also be wary of “technician appointment” text messages containing a link.

Which letter should you send to SFR?

You are still a customer: start with an access request (Article 15) to find out which of your data leaked. SFR has one month to reply. It may refuse to erase what it needs to provide your fibre service.

You have left SFR: request erasure (Article 17). A former operator must not keep your file without a reason: in 2026, the CNIL fined Free Mobile, among other things, for keeping more than 15 million contracts terminated more than five years earlier.

What to do now?

Your action plan

0 / 3 done

Your progress stays in this browser.

A message that mentions the breach, a call “from your bank”? See what to do on What to do?.

Write to SFR

The GDPR lets you ask the company what data it holds about you and what leaked (Articles 15 and 34), or to erase your data (Article 17). It has one month to reply (Article 12(3)).

Ask what leakedRequest erasure

The contact of the data protection officer (DPO) is usually in the privacy policy of sfr.fr. The letters are indicative templates, not legal advice.

Frequently asked questions

Did my bank details leak at SFR?

According to SFR, no: neither passwords nor bank details are concerned. Still be wary of any call asking for your bank details (RIB) or a code received by text message.

Are RED by SFR customers affected?

Yes, RED by SFR fibre subscribers are among the customers notified by SFR.

How many customers are affected?

SFR has not said. The figure of 2.1 million lines comes from the hacker and has not been confirmed.

Sources

Information gathered on 13 October 2026.

This breach is not in the Have I Been Pwned catalogue: the information comes from the sources above. This is public information about the breach, not the breached data. Logos provided by Have I Been Pwned. Trademarks belong to their owners; ShredRGPD has no connection with these companies.