French Citizens data breach: 28.4M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2024-12-20
In September 2024, over 90M rows of data on French Citizens was found left exposed in a publicly facing database. Compiled from various data breaches, the corpus contained 28M unique email addresses with the various source breaches each exposing different fields including name, physical and IP address, phone number and partial credit card data including payment type and last 4 digits. Exposed data: device information, email addresses, ip addresses, names, partial credit card data, phone numbers, physical addresses. The breach dates from Sep 25, 2024; Have I Been Pwned loaded it on Dec 20, 2024.
What to do
- If you had a French Citizens account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch