technology

Cyberattack at Maileva: 22 million people affected

La Poste's subsidiary, Maileva, suffered a cyberattack in mid-September exposing the names and addresses of 22 million people. A complaint has been filed.

france, victime, maileva, la poste, commission, poste, cyberattaque, données

Key facts

  • Maileva, a subsidiary of the La Poste group, has been the victim of a cyberattack that occurred in mid-September. The theft involves the contact…
  • According to a statement by La Poste to AFP, the attack exposes the first name, last name and postal address of 22 million recipients of Maileva's…
  • The Maileva platform is used by private companies, public institutions, health organizations and government administrations, cyberattaque.org specifies.

Maileva, a subsidiary of the La Poste group, has been the victim of a cyberattack that occurred in mid-September. The theft involves the contact details of 22 million people, La Poste announced on Saturday, November 14.

According to a statement by La Poste to AFP, the attack exposes the first name, last name and postal address of 22 million recipients of Maileva's corporate clients.

The Maileva platform is used by private companies, public institutions, health organizations and government administrations, cyberattaque.org specifies.

These clients use it to send mail, invoices, payment reminders and administrative documents that are sometimes confidential.

Maileva notifies the National Commission on Informatics and Liberties (CNIL) and files a complaint, La Poste says.

The information made public concerns the identity and postal address of the recipients involved. In this announcement, La Poste does not disclose any other categories of data.

Dig deeper

What is Maileva?

Maileva is a subsidiary of the La Poste group used by companies, government administrations, public institutions and health organizations to send letters, invoices, reminders and administrative documents.

What is the CNIL?

The National Commission on Informatics and Liberty is the French authority responsible for ensuring respect for personal data; Maileva notified it after the attack.

Why does this case matter?

The theft concerns the identity and postal address of 22 million recipients of Maileva's clients, a volume that affects a large share of the public even without other data being announced.

What happens next?

Maileva is notifying the CNIL and filing a complaint; the announcement specifies no data categories other than first name, last name and postal address.

Lire en français