---
title: "Data breach at Printemps"
description: "Printemps notified some of its customers that an unauthorized third party accessed and extracted certain personal data between 31 July and 17 August 2026. The access resulted from a previously unknown Metabase vulnerability exploited at Shipup, the retailer's delivery-tracking provider. The exposed "
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-08-25-printemps
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-08-25
dateModified: 2026-08-25
---
# Printemps

Data breach — Moderate

Printemps notified some of its customers that an unauthorized third party accessed and extracted certain personal data between 31 July and 17 August 2026. The access resulted from a previously unknown Metabase vulnerability exploited at Shipup, the retailer's delivery-tracking provider. The exposed data covers the names, email addresses and phone numbers of customers who had requested parcel tracking. Printemps notified the French data protection authority (CNIL) on 25 August 2026.

The exposed contact details could be used for phishing, smishing or fraudulent calls impersonating Printemps or a carrier.

| Fact | Value |
| --- | --- |
| Disclosed on | August 25, 2026 |
| Sector | Retail |
| Country | France |
| Cause | Third-party provider |
| Severity | Moderate |
| Status | Confirmed |

## Exposed data

- Email address
- Full name
- Phone number

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Printemps (Shipup)](https://frenchbreaches.com/alertes/printemps-shipup-mtu3svqcg9dj6ir9dd5) — FrenchBreaches
- [Printemps : les données clients dérobées après une cyberattaque chez Shipup](https://www.cyberattaque.org/printemps-les-donnees-clients-derobees-apres-une-cyberattaque-chez-shipup/) — Cyberattaque.org
- [Fuite de données chez Printemps](https://fuitesinfos.fr/article/2026-09-09-printemps) — Fuites Infos
- [Fuite de données chez Shipup, suivi de colis pour e-commerçants, prestataire connecté à boutiques et transporteurs, ce qui change pour vous](https://www.europe-infos.fr/actualites/11541/fuite-de-donnees-chez-shipup-suivi-de-colis-pour-e-commercants-prestataire-connecte-a-boutiques-et-transporteurs-ce-qui-change-pour-vous/) — Europe Infos

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-08-25-printemps
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees