La Poste Mobile faces allegations of a data breach and DDoS attack by a pro-Russian hacker group, though the claims remain unverified.
Hacker group makes data theft claims
A pro-Russian hacker group called NoName057(16) claimed on October 21, 2026, that it had stolen the banking data of 25,000 La Poste Mobile clients and launched a distributed denial of service (DDoS) attack, making the company's website inaccessible. The group shared screenshots on Telegram, allegedly showing customer data such as names, addresses, phone numbers, and partially hidden bank account details. No confirmation from the company
La Poste Mobile, which is owned by Bouygues Telecom, has not confirmed or denied the claims. The company said it is "currently analyzing the situation" when contacted by the website O1net. It has not provided any official statement on the alleged data breach or the DDoS attack. Doubts about the claims
A technical expert website, French Breaches, noted that a DDoS attack does not grant access to a company's internal databases. The group's claims were made after a website outage, but no evidence has been presented to verify the source or authenticity of the data. The number of affected clients, 25,000, has not been confirmed through any shared files or documents. Advice for customers
Until the situation is clarified, customers are advised to be cautious of any messages, calls, or SMS that claim to be from La Poste Mobile or a bank and ask for personal or banking information. The company has around 2.4 million mobile clients, and the claims, if true, could have significant implications for customer privacy and security.
