La Poste Mobile 2022 Data Breach

Contemporaneous security reporting quotes La Poste Mobile as saying that the ransomware incident began on July 4 and that it suspended the affected computer systems after learning of it. That measure temporarily closed the website and customer area. The company said the servers essential to mobile-line operation were protected and phone service was unaffected, while some files on employee computers might have been affected and might contain personal data.

The verified external breach record attributes the event to LockBit ransomware, says company data was published publicly, and records that the site remained offline ten days after the attack. The elements directly confirmed in the company statement are separated from the actor and publication attribution in the external record. The sources do not establish the initial access method, the extent of encryption, or that every customer's file was accessed.

The external value of 533,886 measures unique email addresses, not customers, mobile lines, or unique people. Listing seven classes also does not mean that every field occurred alongside every email. In particular, an email match does not by itself establish that the same person's bank account, address, phone number, and birth date were all present.

Payment cards, passwords, government identifiers, call contents, and message contents are not listed. A bank account number does not by itself permit a withdrawal, but it can make a false payment or customer-support message more convincing when combined with name, address, or phone context. The entry does not add card or password claims absent from the sources.

The completed local job processed la-poste-mobile-emails.txt, a normalized union of three explicit email fields in the source file. Bank, name, address, phone, birth-date, and gender fields were excluded from the import. The job accepted 532,199 valid email lines; after case normalization and deduplication, 532,179 unique email associations remain in production.

The valid-line count is 20 above the local index, while the external unique-email measure is 1,707 above it. Because there is no auditable version-to-version reconciliation, the figures are not added together or interpreted as missing people. A local search result establishes only an email association and does not imply that the other six classes are locally searchable.

People who know they used the service should verify unexpected payment, account-update, or identity-check requests claiming to come from La Poste Mobile or a bank through a known channel opened directly from the active lapostemobile.fr domain, not through a link in the message. Because the sources do not report exposed passwords, this entry does not assume that a general password change is required. If an unusual bank transaction appears, contact details should come from the bank's official channel rather than the incoming message.