Leak at Once for all (via Actradis)

On 11 May 2026, Once For All — the French publisher of the Actradis B2B compliance and administrative-document management platform — issued an official notification to clients about a cybersecurity incident affecting Actradis. The company reported that unauthorized access to part of the platform had been detected, that a technical investigation was underway, and that external cybersecurity specialists had been engaged.

The disclosure followed the appearance, in early May, of a database advertised on a monitored hacker forum by a threat actor using the alias "Lagui," who claimed to have scraped fresh, unprocessed data from the platform. The leak reportedly comprised about 305,000 records across two files: roughly 82,600 client-company entries and roughly 222,500 commercial follow-up entries.

According to Once For All, the affected information was primarily non-sensitive professional B2B data. Exposed categories included:

• Last name and first name
• Professional email addresses
• Professional phone numbers and contact details

Once For All stated that the investigation was not complete and that the exact scope remained under evaluation. It advised affected businesses to stay alert to suspicious emails, avoid clicking dubious links or attachments, verify the authenticity of communications, and monitor their professional accounts for unusual activity.