French postal group La Poste announced on Saturday, November 14, that a cyberattack against Maileva, the business mail-sending platform of its subsidiary Docaposte, led to "the exposure of the contact details (first name, last name, postal address) of 22 million people", recipients of Maileva's corporate customers, according to the statement quoted by 6Médias and L'Express. The attack took place in mid-September, according to Le Parisien as quoted by those same sources.
According to the statement, the National Commission on Informatics and Liberty (CNIL) has been informed, a complaint has been filed and a judicial investigation is under way. Maileva has informed all affected companies, in line with regulations, according to those sources.
Maileva is used to send payslips, invoices, registered letters and meeting notices, and reports more than 70,000 users and 180 million documents sent in 2024, according to 6Médias. The specialist outlet Cyberattaque.org, which has been following the case for weeks, reports that Maileva suspended all its services on September 23 after detecting suspicious activity and restored them on September 29, and that the affected customers include social housing, health and public service bodies.
It has not been reported who is behind the attack. According to published information, banking data are not affected.
This story stands on its own facts. The Post Apocalyptic does not link it to other incidents unless the sources demonstrate a connection.
Sources
- Maileva, filiale de La Poste, victime d'une cyberattaque : 22 millions de personnes concernées
- Docaposte confirme le vol des adresses de 22 millions de Français après une cyberattaque chez cette filiale de La Poste
- Los datos de millones de personas robados durante un ciberataque contra una filial del grupo La Poste: lo que sabemos
Public history
- — Published (editorial approval)