Breaches and incidents

Maileva / Docaposte (France): attempts to hijack customer accounts to send letters, platform shut six days

Per Solutions Numeriques, Docaposte described “unauthorized access attempts by a cybercriminal to send illegitimate letters” via its Maileva online mail...

Disclosed
Verification
Reported by a reputable outlet, citing the company

What happened

  • Per Solutions Numeriques, Docaposte described “unauthorized access attempts by a cybercriminal to send illegitimate letters” via its Maileva online mail platform; the incident was revealed on 24 Sep and the platform was down from 23 Sep 7:00 until 29 Sep for all customers.
  • Root cause: not disclosed; the number of targeted accounts and the method were unknown (the article lists stolen credentials, missing 2FA or a platform flaw as unconfirmed possibilities).
  • No attacker named.
  • Docaposte blocked the targeted accounts, shut the whole service as a precaution and filed a complaint; it was not known whether fraudulent letters were actually sent.