France
2 articles with this tag
Double Counter Discord bot data breach (about 28 million Discord IDs, 1 million emails): what leaked and what members and server admins should do
Tellter SAS, the operator of the Discord verification bot Double Counter, published an incident report on October 5, 2026 (version 2.0 on October 21). It says an attacker got in on October 4 through a publicly reachable Metabase analytics tool on a retired server at a hosting provider, then used two credentials for its cloud that were stored on that same server. About 28 million Discord user IDs and usernames, 27 million IP addresses with coarse location, 25 million hashed device details and 1.0 million email addresses were affected, with partial copying for the first two categories. About 5,000 customer records of the operator's payment products were also copied. Discord passwords were never received by the bot and full card numbers are not affected. The attacker also used the bot's token to post invitations to another Discord server in about 50 large servers. The operator notified the French data protection authority on October 5 and began emailing about 1 million people on October 21. This site's take: members do not need to change their Discord account, but should expect messages that use their ID, email and IP address, and server admins should delete invitation posts made on October 4.
ENGIE Customer Data Breach (France): Contact Details and Contract Numbers Exposed via a Partner Sales Tool, No Bank Data, and What Customers Should Do
ENGIE, the French energy supplier, began emailing customers in France in late October 2026 to say that an attack (wording reported as an act of cyber-malice) hit a tool used by some of its partners to prospect for customers and sell its offers. According to reports citing ENGIE's customer email (ENGIE's statement to BleepingComputer did not itself list the items), the exposed data is first and last names, postal and email addresses, phone numbers, the electricity delivery point (PDL) or gas metering point (PCE) reference, customer ID and contract number. ENGIE says no banking data is affected, that its own IT systems were not compromised, that it cut off the attackers' access to the platform, and that it informed the authorities. The number of customers affected and the partner involved have not been disclosed. We found no notice about this on ENGIE's own website, so this article relies on ENGIE's statements as reported by several outlets. This site's take: do not give an IBAN, card number or code to anyone who calls or writes citing your contract or meter number, and hang up and call the number on your bill.