Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France

What happened

The company confirms bank details weren’t compromiseda. They are the people who received documents sent through its platform.

A cyberattack on La Poste subsidiary Maileva exposed the names and postal addresses of 22 million people, including patients and tenants. Maileva, a subsidiary of the La Poste group, was hit in mid-September in one of the biggest cyberattacks France has seen.

The stolen data includes first names, last names and postal addresses of 22 million people, which are “recipients of Maileva’s client companies .” The specialized sites FrenchBreaches and Cyberattaque.org had flagged the breach first.

According to Le Monde , Maileva sends documents on behalf of companies, including payslips, registered letters, invoices and shareholder meeting notices. It is part of Docaposte, a subsidiary of La Poste, and says it serves more than 70,000 users.

In 2024, it sent 180 million documents. However, the 22 million people affected by the breach are not Maileva’s customers.

This is important because most of these people had never heard of Maileva and had no direct relationship with the company. According to Cyberattaque.org, the affected organizations include social housing providers such as Flandre Opale Habitat and Altéal, as well as medical laboratories belonging to the Inovie group, including AXBIO, BioMedilab and Biofusion.