<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Vulnpocalypse: Incidents in France</title><link>https://vulnpocalypse.dev/feeds/</link><description>Breaches and advisories naming victims in France.</description><language>en</language><lastBuildDate>Thu, 12 Nov 2026 16:59:02 +0000</lastBuildDate><atom:link href="https://vulnpocalypse.dev/feeds/country-fr.xml" rel="self" type="application/rss+xml"/><item><title>Bank Info Security reports French bank lost 100 million euros in cyberattack</title><link>https://vulnpocalypse.dev/advisories/bank-info-security-reports-french-bank-lost-100-million-euros-in-cyberattack/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/bank-info-security-reports-french-bank-lost-100-million-euros-in-cyberattack/</guid><pubDate>Thu, 05 Nov 2026 12:00:00 +0000</pubDate><description>Bank Info Security reports a French bank lost 100 million euros in a cyberattack; details are not confirmed, so wait for official statements.</description><category>breach</category></item><item><title>Cholet Agglomeration (France): cyberattack disrupted municipal telephone service</title><link>https://vulnpocalypse.dev/advisories/cholet-agglomeration-france-cyberattack-disrupted-municipal-telephone/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/cholet-agglomeration-france-cyberattack-disrupted-municipal-telephone/</guid><pubDate>Sun, 01 Nov 2026 12:00:00 +0000</pubDate><description>The City of Cholet&#x27;s notice (updated 1 Nov 2026) says the telephone service &quot;is now operational again&quot; after &quot;the disruption caused by the cyberattack it...</description><category>breach</category></item><item><title>Compagnie des transports strasbourgeois (CTS), Strasbourg (France): API abused to steal data of about 230,000 customer accounts</title><link>https://vulnpocalypse.dev/advisories/compagnie-des-transports-strasbourgeois-cts-strasbourg-france-api/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/compagnie-des-transports-strasbourgeois-cts-strasbourg-france-api/</guid><pubDate>Wed, 28 Oct 2026 12:00:00 +0000</pubDate><description>Per Clubic, CTS announced on 28 Oct that about 230,000 customer accounts (nearly 40% of accounts) were affected.</description><category>breach</category></item><item><title>Alliance Police Nationale (France): union tells members of unauthorized access to personal data</title><link>https://vulnpocalypse.dev/advisories/alliance-police-nationale-france-union-tells-members-of-unauthorized/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/alliance-police-nationale-france-union-tells-members-of-unauthorized/</guid><pubDate>Sat, 24 Oct 2026 12:00:00 +0000</pubDate><description>Per FuitesInfos, the police union&#x27;s letter to members refers to &quot;a computer security incident that led to unauthorized access to some of their personal data&quot;.</description><category>breach</category></item><item><title>ENGIE France: customer data stolen from a partner marketing tool</title><link>https://vulnpocalypse.dev/advisories/engie-france-customer-data-stolen-from-a-partner-marketing-tool/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/engie-france-customer-data-stolen-from-a-partner-marketing-tool/</guid><pubDate>Fri, 23 Oct 2026 12:00:00 +0000</pubDate><description>ENGIE notified French customers that data was taken from a tool its sales partners use for prospecting.</description><category>breach</category></item><item><title>Federation francaise de tir (FFTir), France: member accounts and licence-check function abused, 64,000 ID photos copied</title><link>https://vulnpocalypse.dev/advisories/federation-francaise-de-tir-fftir-france-member-accounts-and-licence/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/federation-francaise-de-tir-fftir-france-member-accounts-and-licence/</guid><pubDate>Thu, 22 Oct 2026 12:00:00 +0000</pubDate><description>FFTir&#x27;s notice says that in the week of 12 Oct 2026 it suffered &quot;a new, prepared attack&quot;.</description><category>breach</category></item><item><title>I-CAD (French national pet identification registry): cat-owner data extracted via a LOOF access account</title><link>https://vulnpocalypse.dev/advisories/i-cad-french-national-pet-identification-registry-cat-owner-data/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/i-cad-french-national-pet-identification-registry-cat-owner-data/</guid><pubDate>Wed, 21 Oct 2026 12:00:00 +0000</pubDate><description>I-CAD&#x27;s note (21 Oct 2026) says it was informed on 18 Oct of an incident from &quot;fraudulent use of an access account assigned to the LOOF&quot; (the feline...</description><category>breach</category></item><item><title>INED (French National Institute for Demographic Studies): server intrusion paralysed IT</title><link>https://vulnpocalypse.dev/advisories/ined-french-national-institute-for-demographic-studies-server/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/ined-french-national-institute-for-demographic-studies-server/</guid><pubDate>Tue, 20 Oct 2026 12:00:00 +0000</pubDate><description>Per ActuaLitte, INED detected an intrusion on its servers on Saturday 17 Oct 2026 that &quot;paralyzes all of its IT infrastructure&quot;.</description><category>breach</category></item><item><title>Armurerie Centrale (France, online gun shop): website intrusion exposed customer data and uploaded documents</title><link>https://vulnpocalypse.dev/advisories/armurerie-centrale-france-online-gun-shop-website-intrusion-exposed/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/armurerie-centrale-france-online-gun-shop-website-intrusion-exposed/</guid><pubDate>Tue, 20 Oct 2026 12:00:00 +0000</pubDate><description>Per Cyberattaque.org, which obtained the customer notification, a third party accessed the site without authorization during September 2026.</description><category>breach</category></item><item><title>France Vacaf (CAF family holiday-aid platform): beneficiary data leak, platform suspended</title><link>https://vulnpocalypse.dev/advisories/france-vacaf-caf-family-holiday-aid-platform-beneficiary-data-leak/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/france-vacaf-caf-family-holiday-aid-platform-beneficiary-data-leak/</guid><pubDate>Sat, 10 Oct 2026 12:00:00 +0000</pubDate><description>The national family allowance fund (Cnaf) said a leak of Vacaf beneficiaries&#x27; data was reported on 9 Oct 2026.</description><category>breach</category></item><item><title>E-Votez / French social-democratic left primary: bot connection flood slowed online vote</title><link>https://vulnpocalypse.dev/advisories/e-votez-french-social-democratic-left-primary-bot-connection-flood/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/e-votez-french-social-democratic-left-primary-bot-connection-flood/</guid><pubDate>Fri, 09 Oct 2026 12:00:00 +0000</pubDate><description>Per Euronews and Clubic, the electronic voting platform (named E-Votez by Clubic) was hit from opening at 8:00 on 9 Oct by &quot;a massive, fake flood of...</description><category>breach</category></item><item><title>AP-HP (Paris public hospitals): data of 1,015 patients from meal-management software sold on forum</title><link>https://vulnpocalypse.dev/advisories/ap-hp-paris-public-hospitals-data-of-1015-patients-from-meal/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/ap-hp-paris-public-hospitals-data-of-1015-patients-from-meal/</guid><pubDate>Wed, 07 Oct 2026 12:00:00 +0000</pubDate><description>AP-HP says it was informed on 24 Sep 2026 of the sale of data on a cybercriminal forum and &quot;confirms the theft of data from 1,015 patients&quot; from a module...</description><category>breach</category></item><item><title>Hauts-de-France Region (France) via contractors Atexo and Docaposte: data of about 545,000 aid applicants leaked, possibly bank details</title><link>https://vulnpocalypse.dev/advisories/hauts-de-france-region-france-via-contractors-atexo-and-docaposte/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/hauts-de-france-region-france-via-contractors-atexo-and-docaposte/</guid><pubDate>Mon, 05 Oct 2026 12:00:00 +0000</pubDate><description>Per AFP (via Techniques de l&#x27;Ingenieur), regional president Xavier Bertrand said data on nearly 545,000 people leaked after a cyberattack on two contractors.</description><category>breach</category></item><item><title>Double Counter / Tellter SAS (France, Discord verification bot): exposed Metabase on retired server led to cloud breach, 12 GB copied</title><link>https://vulnpocalypse.dev/advisories/double-counter-tellter-sas-france-discord-verification-bot-exposed/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/double-counter-tellter-sas-france-discord-verification-bot-exposed/</guid><pubDate>Mon, 05 Oct 2026 12:00:00 +0000</pubDate><description>Double Counter&#x27;s incident report says on 4 Oct 2026 an attacker copied about 12 GB from one of its databases (15:09 to 15:34).</description><category>breach</category></item><item><title>ANSSI (France&#x27;s national cybersecurity agency): 118 accounts on innovation-lab Metabase compromised</title><link>https://vulnpocalypse.dev/advisories/anssi-frances-national-cybersecurity-agency-118-accounts-on/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/anssi-frances-national-cybersecurity-agency-118-accounts-on/</guid><pubDate>Wed, 30 Sep 2026 12:00:00 +0000</pubDate><description>Per IT-Connect and Journal du Geek, ANSSI&#x27;s 30 Sep 2026 REACTIV situation report disclosed the compromise of 118 Metabase user accounts used by ANSSI&#x27;s...</description><category>breach</category></item><item><title>Fakturownia (Poland) and its French brand VosFactures (FACTUALI SAS): invoicing platform breached via PDF generation flaw</title><link>https://vulnpocalypse.dev/advisories/fakturownia-poland-and-its-french-brand-vosfactures-factuali-sas/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/fakturownia-poland-and-its-french-brand-vosfactures-factuali-sas/</guid><pubDate>Tue, 29 Sep 2026 12:00:00 +0000</pubDate><description>TVP World reported on 29 Sep that customer data was breached at the Polish invoicing service Fakturownia.</description><category>breach</category></item><item><title>Maileva / Docaposte (France): attempts to hijack customer accounts to send letters, platform shut six days</title><link>https://vulnpocalypse.dev/advisories/maileva-docaposte-france-attempts-to-hijack-customer-accounts-to-send/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/maileva-docaposte-france-attempts-to-hijack-customer-accounts-to-send/</guid><pubDate>Thu, 24 Sep 2026 12:00:00 +0000</pubDate><description>Per Solutions Numeriques, Docaposte described &quot;unauthorized access attempts by a cybercriminal to send illegitimate letters&quot; via its Maileva online mail...</description><category>breach</category></item><item><title>Belgian Table Tennis Federation and its French-speaking wing: cyberattack, attacker claims 1.69 GB</title><link>https://vulnpocalypse.dev/advisories/belgian-table-tennis-federation-and-its-french-speaking-wing/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/belgian-table-tennis-federation-and-its-french-speaking-wing/</guid><pubDate>Sat, 19 Sep 2026 12:00:00 +0000</pubDate><description>Per BRF (via Belga), the Belgian table tennis federation and its French-speaking wing were hit by a cyberattack the week before.</description><category>breach</category></item><item><title>France DGFiP (tax administration): stolen credentials used to extract tax data on 678,000 people and businesses</title><link>https://vulnpocalypse.dev/advisories/france-dgfip-tax-administration-stolen-credentials-used-to-extract/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/france-dgfip-tax-administration-stolen-credentials-used-to-extract/</guid><pubDate>Fri, 14 Aug 2026 12:00:00 +0000</pubDate><description>The Ministry of Economy said an attacker accessed the DGFiP information system in June and July 2026 and consulted or extracted data on 678,000 individuals...</description><category>breach</category></item></channel></rss>
