Aysu Bicer
15 November 2026•Update: 15 November 2026
A cyberattack targeting Maileva, a digital subsidiary of France's national postal operator La Poste Group, compromised the personal data of approximately 22 million people, French media reported on Sunday.
According to French daily newspapers Le Figaro and La Tribune, Maileva—which operates under La Poste's digital branch Docaposte—suffered a large-scale cyber intrusion in mid-September.
Reports citing data from cybersecurity platform Cyberattaque.org indicated that the breach impacted social housing providers, including Flandre Opale Habitat and Alteal, alongside medical laboratories and patients of Foch Hospital in Suresnes.
Hackers reportedly accessed the contents of certain payment reminder letters, exposing invoice numbers, treatment dates, and amounts owed.
Maileva reported the incident to France's data protection authority, the National Commission for Information Technology and Civil Liberties (CNIL), and filed a formal criminal complaint.
The company announced that all affected corporate clients have been notified in accordance with legal regulations and that a judicial investigation is currently underway.
Serving over 70,000 corporate clients, Maileva handles the dispatch of payslips, invoices, and registered mail. French media described the breach—which affects roughly one-third of the country's population—as one of the largest data leaks ever recorded in France.
