The Maileva cyberattack has widened from the reported collection of contact details for 22 million recipients to a possible exposure of personal data contained in mailed documents. Franceinfo reports that Flandre Opale Habitat, a social-housing provider, said the incident could have enabled unauthorised access to personal data in letters sent during the past ten years.
La Poste told AFP that the 22 million people were recipients of mail sent by Maileva’s business clients. That reported figure concerns contact details; it should not be treated as evidence that every recipient’s correspondence or financial information was accessed.
The distinction matters because Maileva, a Docaposte subsidiary in the La Poste group, processes professional mail and documents for companies and some public institutions, including social-housing providers and hospitals. Flandre Opale Habitat said the documents at issue could include administrative or financial information, such as an invoice amount.
The Paris prosecutor’s office said its cybercrime unit is investigating an alleged attack on an automated data-processing system. The inquiry may establish how the intrusion occurred, while Maileva and its customers face a more immediate disclosure task: identify the categories of documents and personal data that may have been exposed, and the recipients concerned.
That is the practical consequence of the new reporting. A name and postal address are not equivalent to data contained in administrative correspondence, yet the available reporting does not establish that all letters handled by Maileva, or all 22 million recipients, were affected in the same way.
Sources
- franceinfo Tous titres · Source date: 2026-11-15
Independent editorial content. WUA is not affiliated with any political party. 2026-11-15
Maileva cyberattack: What La Poste says about 22 million people affected