Mahmia, a subsidiary of the French postal group Laposte, was the target of a massive cyber attack that led to the theft of identity information and postal addresses of approximately 22 million people.
The Lapost Group confirmed the occurrence of this attack and the dimensions of the data leak on Saturday, November 14, after publishing reports from specialized cyber security sites. This attack took place in Shahrivar 1405, but the official news of it was published about two months later.
Mailova, a subsidiary of Dukapost, provides printing, sending and management of administrative and commercial correspondence services for various companies, organizations and institutions. This collection is active in the field of sending payslips, invoices, personalized letters, payment notices and administrative correspondence, and according to published information it has over 70,000 corporate users.
According to the company's official statement, the disclosed information includes names, surnames and postal addresses of approximately 22 million people. Laposte announced that people's bank details were not stolen in this attack.
However, investigations by the special cyber means Cyberattack show that in some cases, the range of access of the attackers went beyond identity information. For example, the Puch Hospital in the city of Sorens in the suburbs of Paris announced that a cyber attacker may have accessed the content of some patient payment warning letters. These letters included the invoice number, the date of receipt of the medical services and the amount of the bill, information that can reveal the status of a person's visit to the hospital even without revealing the type of treatment.
Other groups linked to this leak include several social housing companies and medical laboratories in France.
According to the investigations of the specialized website Cybertech, this file had about 39 million correspondence records, which after removing duplicates reached about 22 million independent people.
Cyber security experts have warned that stolen information can be used to craft fake messages, phone scams, falsify office correspondence and try to get more information from victims.