FRWhat to do after a data breach
A suspicious message, an exposed card, a password out in the wild: here is who to contact, through the official channels in France.
These are the official French services. Their websites are mainly in French, and the steps assume you live in France.
I received a suspicious message
Breaches are often used to make scams more convincing. Do not click, do not reply, report it.
A suspicious text message
Forward it for free to 33700, then reply to the automatic text with the sender’s number. Then delete it without clicking the link.
33700.fr (in French) (new tab)A suspicious call or voicemail
Text “spam vocal” followed by the number that called you to 33700. Never call back an unknown number that quotes your details.
33700.fr (in French) (new tab)A phishing email
Do not click anything, do not reply. Report it on Signal Spam: the email is passed on to the authorities and to email providers.
signal-spam.fr (in French) (new tab)A link to a fake website
Copy the website address (without opening it) and report it on Phishing Initiative so that it gets blocked. For a scam, also report it on Pharos.
phishing-initiative.fr (in French) (new tab)A cold call
Since 11 August 2026, a business can no longer cold-call you without your prior consent (Bloctel no longer exists). Report the company to the consumer protection authority on SignalConso.
signal.conso.gouv.fr (in French) (new tab)An online scam or illegal content
Report it to the police and gendarmerie on the Pharos platform. If you lost money, file a complaint.
internet-signalement.gouv.fr (in French) (new tab)
The steps, data type by data type
My password leaked
- Change it on the website concerned, then everywhere you reused it.
- Turn on two-factor authentication, starting with your email account: it can be used to reset all your other accounts.
- Check the devices and sessions connected to your important accounts and sign out the ones you do not recognise.
- Use a different password for each website, kept in a password manager.
My card or bank details leaked
- Tell your bank and watch your statements in the following days and weeks.
- If you see a payment you did not make, block your card straight away: with your bank, or on 0 892 705 705 (interbank line, 24/7, €0.34/min). Write down the blocking reference number.
- Your bank will never ask you for a code received by text message, or for your login details by phone or email.
- Dispute fraudulent payments with your bank and file a complaint if necessary.
My ID document or social security number leaked
- Keep evidence: dated screenshots, page addresses, messages received.
- Watch your post and your accounts (bank, ameli, tax): a loan or subscription you did not ask for is a sign of identity theft.
- Your social security number cannot be changed: stay wary of fake messages from the Assurance maladie (health insurance) or a mutuelle for a long time.
- If your identity is misused, file a complaint and tell the organisations concerned. France Victimes supports you for free on 116 006, every day from 9 am to 7 pm.
My email address leaked
- Expect convincing phishing that uses your name or the services you use.
- Secure your email account first: a unique password and two-factor authentication.
- Check the automatic forwarding rules of your email account: an attacker can add one to read your mail.
My phone number leaked
- Report suspicious texts and calls to 33700.
- Beware of fake bank advisers: hang up and call your bank back on its usual number.
- If your phone suddenly loses network, contact your operator: your line may have been hijacked (fraudulent SIM swap).
Then exercise your rights: check what leaked and write to the companies concerned. In an emergency or if you are in danger, call 17 (police) or 112.