A cyberattack on “Maileva”, a digital subsidiary of France’s national postal operator “La Poste Group”, compromised the personal data of approximately 22 million people, French media reported on Sunday, according to Anadolu Agency.
French newspapers “Le Figaro” and “La Tribune” reported that the large-scale intrusion occurred in mid-September. “Maileva” operates under “La Poste”’s digital branch, “Docaposte”.
Reports citing information from cybersecurity platform “Cyberattaque.org” said the breach affected social housing providers, including “Flandre Opale Habitat” and “Alteal”, as well as medical laboratories and patients of “Foch Hospital” in Suresnes.
Hackers reportedly accessed the contents of some payment reminder letters, exposing invoice numbers, treatment dates and amounts owed.
“Maileva” reported the incident to France’s data protection authority, the National Commission for Information Technology and Civil Liberties (CNIL), and filed a formal criminal complaint.
The company said all affected corporate clients had been notified in line with legal requirements and that a judicial investigation was underway.
“Maileva” serves more than 70,000 corporate clients and handles the dispatch of payslips, invoices and registered mail. French media described the breach, which affects roughly one-third of France’s population, as one of the largest data leaks ever recorded in the country.