Le Point Data Breach
The 2024 Le Point data breach occurred on 10 November 2024 when the subscriber and customer database of Le Point (lepoint.fr), a prestigious French weekly political and news magazine founded in 1972, was compromised by the cybercrime entity known as "@near" (Near2tlg) and subsequently published on underground breach forums.
Exposed Data Types
6- Email addresses
- Names
- Phone numbers
- Physical addresses
- Dates of birth
- Genders
About This Breach
What information was affected in the Le Point incident?
The compromised JSON customer dossier export (lepoint.txt) includes full subscriber files. Impacted records for 479,166 unique subscribers and readers encompass:
- Personal & Identity Data: Subscriber full names (nom), honorific titles / genders (civilite), and dates of birth (naissance).
- Contact Credentials: Canonical validated email addresses and primary/secondary telephone numbers (phone, phoneSecond).
- Physical Location Data: Full delivery and billing street addresses (adresse), postal codes (codePostal), and cities (ville).
- Corporate & Household Details: Company affiliations (societe), household member counts (nbPersonneFoyer), and spouse names (conjoint).
How many accounts were affected?
Rigorous RFC canonical parsing and deduplication across 966,999 subscriber dossiers confirmed 479,166 unique valid email addresses.
Technical analysis and security risks
The widespread exposure of physical home addresses alongside phone numbers and verified emails of news subscribers enables hyper-targeted spear-phishing, fraudulent subscription billing scams, and social engineering attacks.
Recommended actions for affected users
Subscribers and digital readers of Le Point should:
- Exercise vigilance regarding unsolicited communications purporting to represent Le Point subscription services or delivery departments.
- Never disclose payment credentials or verification codes over phone calls or unverified email links.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information