Leak at Batterie de Portable

On 28 December 2025, Batteriedeportable — a French e-commerce retailer in Aubagne that sells batteries and chargers for laptops and phones — notified its customers that their personal data had been compromised in a cyberattack. The intrusion took place between 8 and 10 November 2025 and was detected on 10 November, but the company waited roughly seven weeks before going public.

The retailer described the incident as "unauthorized access" to its information system; the precise attack vector was not disclosed. Batteriedeportable, which claims over one million customers across Europe and lists some 645,000 product references, did not state how many individuals were ultimately affected.

The exposed data was limited to identity and contact details:

• Surname and first name
• Date of birth
• Postal address
• Email address
• Landline and mobile phone numbers

The company says other stored information was not compromised and gave no indication that banking data was involved. The chief risk is targeted phishing — fraudulent emails, SMS and calls impersonating the brand using the leaked details.

In response, Batteriedeportable reported the breach to France's cybersecurity agency (ANSSI) and the data protection authority (CNIL), filed a criminal complaint, temporarily disabled certain features, and said it would roll out multi-factor authentication. Customers were advised to reset their passwords and watch for suspicious activity.