La Poste has announced that Maileva, a subsidiary of the group, was the target of a significant cyberattack in mid-September. The breach led to the theft of personal coordinates for approximately 22 million people, representing nearly one-third of the French population. Maileva operates as a specialized platform for sending professional correspondence—including pay slips, registered letters, invoices, and general assembly notices—for small and medium-sized enterprises (SMEs) and intermediate-sized companies. [1]
According to a statement transmitted to AFP, the exposed data consists of first names, last names, and postal addresses of recipients who were customers of companies using Maileva's services. Maileva is a subsidiary of Docaposte, which in turn is a subsidiary of the La Poste group. The platform reports having more than 70,000 users and dispatched 180 million documents throughout 2024. [1]
Following the discovery of the incident, Maileva notified the National Commission for Information Technology and Liberties (CNIL) and filed a formal complaint. A judicial investigation is currently underway to determine the circumstances of the breach. La Poste stated that, in accordance with regulations, all affected client companies have been informed of the security incident by Maileva. [1]
Specialized sites such as FrenchBreaches and cyberattaque.org have described the event as one of the most significant data leaks in France. This incident follows a pattern of increasing cyberattacks against French public organizations and private enterprises. Last year, La Poste suffered a cyberattack claimed by pro-Russian hackers shortly before Christmas. Other recent high-profile incidents include a massive attack on France Travail in early 2024, which resulting in the data leak of 36.8 million users, and a recent attack on Crédit Mutuel Arkéa involving losses estimated at around 100 million euros. [1] [2]
As the story develops
Update
New details on victims of Maileva cyberattack
According to Cyberattaque.org, the breach particularly affects recipients of correspondence from social housing associations (including Flandre Opale Habitat and Altéal), patients of medical laboratories (such as Inovie AXBIO, BioMedilab, or Biofusion from the Inovie group), and patients of hospitals, including the Foch Hospital in Suresnes (Hauts-de-Seine), through a subcontractor. [2]
In the case of Foch Hospital, a hacker allegedly accessed the content of payment reminder emails, which included invoice numbers, treatment data, and payment amounts, according to Cyberattaque.org. This specific leak occurred via Kiwee.care, a company specializing in amicable debt recovery and medical claims management that utilizes Maileva for printing and mailing correspondence. [2]
Cyberattaque.org indicates that other medical institutions utilizing Kiwee.care, which collaborates with numerous sector actors, may also be affected. [2]
The leak is considered one of the largest in France. Other significant thefts include those targeting third-party payment service providers Almerys and Viamedis in 2024, which affected over 33 million French citizens. [2]
At the beginning of 2024, France Travail was the target of a massive attack resulting in the data leak of 36.8 million users. [2]
Additionally, several attacks against the tax administration this summer led to the theft of data for nearly 700,000 people. [2]
Reports and experts suggest France is among the most targeted countries for cyberattacks due to its economic attractiveness and its international positions, particularly regarding the conflict in Ukraine. [2]
Data published by CNIL in 2025 shows an upward trend in data leaks; in 2024, France recorded over 5,600 security breaches, a 20% increase compared to the previous year. [2]
- Categories:
- Security
- Entities:
