<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <title>ShredRGPD · Data breaches in France</title>
  <subtitle>French breaches from the public Have I Been Pwned catalogue (CC BY 4.0) and a few sourced breaches missing from it, with what to do.</subtitle>
  <link href="https://shredrgpd.fr/en/breaches.xml" rel="self" />
  <link href="https://shredrgpd.fr/en" />
  <id>https://shredrgpd.fr/en/breaches.xml</id>
  <updated>2026-10-20T00:00:00Z</updated>
  <entry>
    <title>Assurance Retraite data breach (Sep 2024)</title>
    <link href="https://shredrgpd.fr/en/breach/assurance-retraite" />
    <id>https://shredrgpd.fr/en/breach/assurance-retraite</id>
    <updated>2026-10-20T00:00:00Z</updated>
    <summary>Breach of 1 September 2024. 70,372 accounts. Exposed data: dates of birth, email addresses, family members' names, government issued IDs, income levels, marital statuses, names, phone numbers, physical addresses.</summary>
  </entry>
  <entry>
    <title>Gîtes de France data breach (May 2026)</title>
    <link href="https://shredrgpd.fr/en/breach/gites-de-france" />
    <id>https://shredrgpd.fr/en/breach/gites-de-france</id>
    <updated>2026-10-18T00:00:00Z</updated>
    <summary>Breach of 16 May 2026. 117,574 accounts. Exposed data: booking details, email addresses, names, phone numbers, physical addresses.</summary>
  </entry>
  <entry>
    <title>Questel data breach (Aug 2026)</title>
    <link href="https://shredrgpd.fr/en/breach/questel" />
    <id>https://shredrgpd.fr/en/breach/questel</id>
    <updated>2026-09-01T00:00:00Z</updated>
    <summary>Breach of 1 August 2026. 1,226,209 accounts. Exposed data: email addresses, employers, job titles, names, phone numbers, physical addresses, support tickets.</summary>
  </entry>
  <entry>
    <title>SFR data breach (Jul 2026)</title>
    <link href="https://shredrgpd.fr/en/breach/sfr" />
    <id>https://shredrgpd.fr/en/breach/sfr</id>
    <updated>2026-08-20T00:00:00Z</updated>
    <summary>Breach of 2 July 2026. Exposed data: salutations, names, physical addresses, phone numbers, contract IDs, technical line data.</summary>
  </entry>
  <entry>
    <title>Association Nationale des Premiers Secours data breach (Jan 2026)</title>
    <link href="https://shredrgpd.fr/en/breach/association-nationale-des-premiers-secours" />
    <id>https://shredrgpd.fr/en/breach/association-nationale-des-premiers-secours</id>
    <updated>2026-02-10T00:00:00Z</updated>
    <summary>Breach of 30 January 2026. 5,600 accounts. Exposed data: dates of birth, email addresses, names, places of birth, salutations.</summary>
  </entry>
  <entry>
    <title>Pass'Sport data breach (Dec 2025)</title>
    <link href="https://shredrgpd.fr/en/breach/passsport" />
    <id>https://shredrgpd.fr/en/breach/passsport</id>
    <updated>2026-01-18T00:00:00Z</updated>
    <summary>Breach of 17 December 2025. 6,366,133 accounts. Exposed data: email addresses, genders, names, phone numbers, physical addresses.</summary>
  </entry>
  <entry>
    <title>AUTOSUR data breach (Mar 2025)</title>
    <link href="https://shredrgpd.fr/en/breach/autosur" />
    <id>https://shredrgpd.fr/en/breach/autosur</id>
    <updated>2025-12-18T00:00:00Z</updated>
    <summary>Breach of 16 March 2025. 487,226 accounts. Exposed data: email addresses, names, phone numbers, physical addresses, vehicle details, vehicle identification numbers (VINs), vehicle registration plates.</summary>
  </entry>
  <entry>
    <title>Eurofiber data breach (Nov 2025)</title>
    <link href="https://shredrgpd.fr/en/breach/eurofiber" />
    <id>https://shredrgpd.fr/en/breach/eurofiber</id>
    <updated>2025-11-20T00:00:00Z</updated>
    <summary>Breach of 13 November 2025. 10,003 accounts. Exposed data: email addresses, names, phone numbers.</summary>
  </entry>
  <entry>
    <title>Cultura data breach (Sep 2024)</title>
    <link href="https://shredrgpd.fr/en/breach/cultura" />
    <id>https://shredrgpd.fr/en/breach/cultura</id>
    <updated>2025-09-25T00:00:00Z</updated>
    <summary>Breach of 6 September 2024. 1,462,025 accounts. Exposed data: email addresses, names, phone numbers, physical addresses, purchases.</summary>
  </entry>
  <entry>
    <title>Bouygues Telecom data breach (Aug 2025)</title>
    <link href="https://shredrgpd.fr/en/breach/bouygues-telecom" />
    <id>https://shredrgpd.fr/en/breach/bouygues-telecom</id>
    <updated>2025-09-24T00:00:00Z</updated>
    <summary>Breach of 4 August 2025. 5,685,771 accounts. Exposed data: bank account numbers, dates of birth, email addresses, names, phone numbers, physical addresses.</summary>
  </entry>
  <entry>
    <title>Free data breach (Oct 2024)</title>
    <link href="https://shredrgpd.fr/en/breach/free" />
    <id>https://shredrgpd.fr/en/breach/free</id>
    <updated>2025-05-27T00:00:00Z</updated>
    <summary>Breach of 17 October 2024. 13,926,173 accounts. Exposed data: bank account numbers, dates of birth, genders, names, phone numbers, physical addresses.</summary>
  </entry>
  <entry>
    <title>Fédération Francaise de Rugby data breach (Jul 2023)</title>
    <link href="https://shredrgpd.fr/en/breach/federation-francaise-de-rugby" />
    <id>https://shredrgpd.fr/en/breach/federation-francaise-de-rugby</id>
    <updated>2025-05-22T00:00:00Z</updated>
    <summary>Breach of 6 July 2023. 281,977 accounts. Exposed data: dates of birth, email addresses, names, phone numbers.</summary>
  </entry>
  <entry>
    <title>Boulanger data breach (Sep 2024)</title>
    <link href="https://shredrgpd.fr/en/breach/boulanger" />
    <id>https://shredrgpd.fr/en/breach/boulanger</id>
    <updated>2025-04-08T00:00:00Z</updated>
    <summary>Breach of 6 September 2024. 2,077,078 accounts. Exposed data: email addresses, geographic locations, latitude and longitude pairs, names, phone numbers, physical addresses.</summary>
  </entry>
  <entry>
    <title>Sport 2000 data breach (Apr 2024)</title>
    <link href="https://shredrgpd.fr/en/breach/sport-2000" />
    <id>https://shredrgpd.fr/en/breach/sport-2000</id>
    <updated>2024-08-28T00:00:00Z</updated>
    <summary>Breach of 18 April 2024. 3,189,643 accounts. Exposed data: dates of birth, email addresses, names, phone numbers, physical addresses, purchases, salutations.</summary>
  </entry>
  <entry>
    <title>LDLC data breach (Feb 2024)</title>
    <link href="https://shredrgpd.fr/en/breach/ldlc" />
    <id>https://shredrgpd.fr/en/breach/ldlc</id>
    <updated>2024-08-13T00:00:00Z</updated>
    <summary>Breach of 28 February 2024. 1,266,026 accounts. Exposed data: email addresses, names, phone numbers, physical addresses, salutations.</summary>
  </entry>
  <entry>
    <title>Zadig &amp; Voltaire data breach (Nov 2023)</title>
    <link href="https://shredrgpd.fr/en/breach/zadig-voltaire" />
    <id>https://shredrgpd.fr/en/breach/zadig-voltaire</id>
    <updated>2024-06-17T00:00:00Z</updated>
    <summary>Breach of 16 November 2023. 586,895 accounts. Exposed data: email addresses, genders, names, phone numbers, physical addresses.</summary>
  </entry>
  <entry>
    <title>Le Slip Français data breach (Apr 2024)</title>
    <link href="https://shredrgpd.fr/en/breach/le-slip-francais" />
    <id>https://shredrgpd.fr/en/breach/le-slip-francais</id>
    <updated>2024-04-18T00:00:00Z</updated>
    <summary>Breach of 13 April 2024. 1,495,127 accounts. Exposed data: email addresses, names, phone numbers, physical addresses.</summary>
  </entry>
  <entry>
    <title>France Travail data breach (Mar 2024)</title>
    <link href="https://shredrgpd.fr/en/breach/france-travail" />
    <id>https://shredrgpd.fr/en/breach/france-travail</id>
    <updated>2024-03-13T00:00:00Z</updated>
    <summary>Breach of 5 March 2024. 36,800,000 people. Exposed data: names, dates of birth, social security numbers, France Travail IDs, email addresses, physical addresses, phone numbers.</summary>
  </entry>
  <entry>
    <title>Deezer data breach (Apr 2019)</title>
    <link href="https://shredrgpd.fr/en/breach/deezer" />
    <id>https://shredrgpd.fr/en/breach/deezer</id>
    <updated>2023-01-02T00:00:00Z</updated>
    <summary>Breach of 22 April 2019. 229,037,936 accounts. Exposed data: dates of birth, email addresses, genders, geographic locations, IP addresses, names, spoken languages, usernames.</summary>
  </entry>
  <entry>
    <title>La Poste Mobile data breach (Jul 2022)</title>
    <link href="https://shredrgpd.fr/en/breach/la-poste-mobile" />
    <id>https://shredrgpd.fr/en/breach/la-poste-mobile</id>
    <updated>2022-07-14T00:00:00Z</updated>
    <summary>Breach of 4 July 2022. 533,886 accounts. Exposed data: bank account numbers, dates of birth, email addresses, genders, names, phone numbers, physical addresses.</summary>
  </entry>
  <entry>
    <title>Bourse des Vols data breach (Jan 2021)</title>
    <link href="https://shredrgpd.fr/en/breach/bourse-des-vols" />
    <id>https://shredrgpd.fr/en/breach/bourse-des-vols</id>
    <updated>2022-07-03T00:00:00Z</updated>
    <summary>Breach of 12 January 2021. 1,460,130 accounts. Exposed data: dates of birth, email addresses, flights taken, IP addresses, names, phone numbers, physical addresses, purchases.</summary>
  </entry>
  <entry>
    <title>MacGeneration data breach (Jan 2022)</title>
    <link href="https://shredrgpd.fr/en/breach/macgeneration" />
    <id>https://shredrgpd.fr/en/breach/macgeneration</id>
    <updated>2022-03-03T00:00:00Z</updated>
    <summary>Breach of 29 January 2022. 101,004 accounts. Exposed data: email addresses, passwords, usernames.</summary>
  </entry>
  <entry>
    <title>Short Édition data breach (Jun 2021)</title>
    <link href="https://shredrgpd.fr/en/breach/short-edition" />
    <id>https://shredrgpd.fr/en/breach/short-edition</id>
    <updated>2021-07-19T00:00:00Z</updated>
    <summary>Breach of 26 June 2021. 505,466 accounts. Exposed data: dates of birth, email addresses, genders, names, passwords, phone numbers, physical addresses, social media profiles, usernames.</summary>
  </entry>
  <entry>
    <title>WiziShop data breach (Jul 2020)</title>
    <link href="https://shredrgpd.fr/en/breach/wizishop" />
    <id>https://shredrgpd.fr/en/breach/wizishop</id>
    <updated>2020-10-05T00:00:00Z</updated>
    <summary>Breach of 14 July 2020. 2,856,769 accounts. Exposed data: dates of birth, email addresses, IP addresses, names, passwords, phone numbers, physical addresses.</summary>
  </entry>
  <entry>
    <title>Artvalue.com data breach (Jun 2019)</title>
    <link href="https://shredrgpd.fr/en/breach/artvalue-com" />
    <id>https://shredrgpd.fr/en/breach/artvalue-com</id>
    <updated>2019-07-19T00:00:00Z</updated>
    <summary>Breach of 19 June 2019. 157,692 accounts. Exposed data: email addresses, names, passwords, salutations, usernames.</summary>
  </entry>
  <entry>
    <title>Appartoo data breach (Mar 2017)</title>
    <link href="https://shredrgpd.fr/en/breach/appartoo" />
    <id>https://shredrgpd.fr/en/breach/appartoo</id>
    <updated>2019-05-02T00:00:00Z</updated>
    <summary>Breach of 25 March 2017. 49,681 accounts. Exposed data: ages, auth tokens, email addresses, employment statuses, genders, IP addresses, marital statuses, names, passwords, physical addresses, private messages, social media profiles.</summary>
  </entry>
  <entry>
    <title>Pemiblanc data breach (Apr 2018)</title>
    <link href="https://shredrgpd.fr/en/breach/pemiblanc" />
    <id>https://shredrgpd.fr/en/breach/pemiblanc</id>
    <updated>2018-07-09T00:00:00Z</updated>
    <summary>Breach of 2 April 2018. 110,964,206 accounts. Exposed data: email addresses, passwords.</summary>
  </entry>
  <entry>
    <title>Dailymotion data breach (Oct 2016)</title>
    <link href="https://shredrgpd.fr/en/breach/dailymotion" />
    <id>https://shredrgpd.fr/en/breach/dailymotion</id>
    <updated>2017-08-07T00:00:00Z</updated>
    <summary>Breach of 20 October 2016. 85,176,234 accounts. Exposed data: email addresses, passwords, usernames.</summary>
  </entry>
  <entry>
    <title>Pokébip data breach (Jul 2015)</title>
    <link href="https://shredrgpd.fr/en/breach/pokebip" />
    <id>https://shredrgpd.fr/en/breach/pokebip</id>
    <updated>2016-09-09T00:00:00Z</updated>
    <summary>Breach of 28 July 2015. 657,001 accounts. Exposed data: email addresses, IP addresses, passwords, time zones, usernames, website activity.</summary>
  </entry>
  <entry>
    <title>Minefield data breach (Jun 2015)</title>
    <link href="https://shredrgpd.fr/en/breach/minefield" />
    <id>https://shredrgpd.fr/en/breach/minefield</id>
    <updated>2016-03-09T00:00:00Z</updated>
    <summary>Breach of 28 June 2015. 188,343 accounts. Exposed data: dates of birth, email addresses, IP addresses, passwords, usernames, website activity.</summary>
  </entry>
</feed>
