Data leak at Mingat

On 19 March 2026, Mingat — a long-established vehicle-rental company based in Vaulx-en-Velin, in the Lyon area, operating a fleet of more than 1,600 cars, vans and trucks across the Auvergne-Rhône-Alpes region — confirmed that it had suffered a data leak affecting its customers.

The company notified its customers directly of the security incident, indicating that personal data held in its rental records had been exposed. For a vehicle-rental business, such records typically include identity and contact details together with information tied to bookings and rental contracts. The full attack vector and the precise number of customers concerned were not detailed in the available reporting.

Categories of data likely to feature in such records include:

• Names and contact details (postal address, email, telephone)
• Information linked to rental bookings and contracts
• Driving-licence and identity-document details commonly collected for rentals

Mingat publicly confirmed the incident and informed affected customers, indicating the breach had been identified and was being managed. No ransomware claim or extortion demand has been associated with this case in the available sources.