Leak at Meilleurtaux

On 30 September 2024, Meilleurtaux — one of France's largest online brokers of mortgage loans, consumer credit and insurance — notified its customers that it had suffered a data breach. The company said it had detected an external attack on its IT systems, which it quickly halted, and that the incident affected people who had recently requested support or a quote from Meilleurtaux.

The broker did not disclose how the systems were compromised or how many individuals were impacted. The exposed information was nonetheless described as highly sensitive, making affected customers prime targets for convincing phishing and impersonation scams in which fraudsters pose as a banking or real-estate advisor.

Exposed data categories included:

• First and last name
• Date and country of birth
• Postal address and phone number
• Family situation
• Professional/employment status
• Income

Meilleurtaux stated it had stopped the attack and warned customers to be vigilant against phishing attempts. The exact number of records exposed was not made public, and no group publicly claimed responsibility at the time of disclosure.