Leak at ProxiServe

On 25 November 2025, ProxiServe — a French provider of residential heating, plumbing and water-metering maintenance services — was reported to have had a customer database leaked on a hacker forum. The exposed dataset covered 294,639 customers.

The records combined personal identifiers with operational details of home service calls, a combination that is particularly sensitive because it ties named individuals to their home addresses and to scheduled on-site visits. Exposed data categories included:

• First and last name
• Email address
• Postal address
• Reason for the intervention
• Date of the intervention

Because ProxiServe technicians visit homes, security researchers flagged the leak as a vector for "fake technician" social-engineering and physical-intrusion scams: attackers can reference genuine appointment details to appear legitimate to customers and building managers.

The attack vector was not disclosed, and as of reporting ProxiServe had not issued a public statement quantifying or confirming the incident, so its status remains unknown. Customers were advised to be wary of unsolicited contact referencing ProxiServe interventions and, if applicable, to reset their customer-portal credentials.