French Citizens Data Breach

What happened?

In September 2024, over 90M rows of data on French Citizens was found left exposed in a publicly facing database . Compiled from various data breaches, the corpus contained 28M unique email addresses with the various source breaches each exposing different fields including name, physical and IP address, phone number and partial credit card data including payment type and last 4 digits.

When did it happen?

The breach date in the public record is September 25, 2024. The record was added to the catalogue on December 20, 2024 and last updated there on December 20, 2024.

What information was reported as exposed?

• Device information
• Email addresses
• IP addresses
• Names
• Partial credit card data
• Phone numbers
• Physical addresses

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with French Citizens around September 25, 2024. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.