Valeurs actuelles
ModerateReportedMedia and leisure
A threat actor claims to hold about 45,000 invoices tied to Valeurs actuelles magazine subscriptions, according to FrenchBreaches, which reviewed samples. The samples contain names, postal addresses, email addresses, customer references, invoice numbers, dates and amounts, and values in a field named password_hash. Several visible invoices date from 2022. The origin and authenticity of the files are unconfirmed, and 45,000 invoices do not necessarily mean 45,000 distinct individuals.
These data would let a malicious third party link an identifiable person to a subscription and use these contact details and references for targeted phishing messages.
- Disclosed on
- October 20, 2026
- Sector
- Media and leisure
- Country
- France
- Cause
- Undisclosed
Exposed data
- Full name
- Postal address
- Email address
- Customer ID
- Order history
- Password (hashed)
You are only affected if you had an account or an order with this organisation.
What you can do
- Change that password — and everywhere you reused it. That is how a leak spreads to your other accounts.
- Turn on two-factor authentication on the affected accounts: a stolen password is then no longer enough.
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact