Country
French cooperative banking group Crédit Mutuel Arkéa announced on November 4, 2026, that it had suffered a cyberattack enabling attackers to execute fraudulent transactions, prompting the bank to suspend certain operations to prevent further fraudulent fund movements .
An alert from France's CERT-FR warned of widespread compromises affecting Danfoss AK-SM/AK-SC and Copeland/Dixell XWEB refrigeration remote controllers, with attackers primarily exploiting internet-exposed management interfaces .
France's tax authority DGFiP said on August 14 that a malicious actor claimed on August 12 and 13 to have stolen data following illegitimate access to its information system in June, July and August .
According to BleepingComputer, German supermarket chain Lidl notified customers in Germany, Belgium and the Netherlands that attackers stole their personal information in a breach at a service provider; according to 01net, some French customers were also affected .
According to DSIH, Pulsy, the Grand Est regional e-health operator, was attacked on June 18, 2026, leading to exfiltration of about 5 million rows of patient administrative data including names, sex, birth dates and the national health identifier INS .
According to franceinfo, French health third-party payment operator Almerys confirmed on May 25 a cyberattack giving unauthorized access to the care-authorization (PEC) site used by health professionals, which was shut down; VIASANTÉ Mutuelle says the intrusion followed the hijacking of a health professional's account .
According to The Register, Basic-Fit, Europe's largest gym chain, confirmed data of around one million customers including bank details was stolen, from the system that records members' club visits .
A Nancy metropolitan museum said its online ticketing provider Vivaticket was hit by ransomware on March 2, 2026, encrypting hosted data and disabling online sales; if data was exfiltrated it would cover ticket-account names, contact details and purchase history, not bank data .
According to BleepingComputer, French DIY marketplace ManoMano confirmed it identified unauthorized access linked to a customer-service subcontractor in January 2026, resulting in extraction of personal data tied to customer accounts and support interactions .
France's DGFiP said that from late January 2026 a malicious actor used the stolen credentials of an official with inter-ministry access to consult the FICOBA file, which lists all bank accounts opened in France .
French government cyber assistance platform Cybermalveillance issued guidance regarding the customer personal data breach at telecom operator Free .
According to BFMTV, French media reported that telecommunications operator SFR suffered a cyberattack in which customer-related data may have been stolen .
France's National Commission on Informatics and Liberty (CNIL) announced that two third-party healthcare payment operators suffered data breaches and that it has opened an investigation .