---
title: "Data breach at BumFot"
description: "On September 7, 2026, a database presented as originating from BumFot.fr, a French QR-code photo album sharing service, was published on a cybercriminal forum. The listing claims data on approximately 1,300 users, including names, email addresses, phone numbers, account identifiers, and registration"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-07-bumfot
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-07
dateModified: 2026-09-07
---
# BumFot

Data breach — Moderate

On September 7, 2026, a database presented as originating from BumFot.fr, a French QR-code photo album sharing service, was published on a cybercriminal forum. The listing claims data on approximately 1,300 users, including names, email addresses, phone numbers, account identifiers, and registration/last-login dates. No passwords appear in the published sample. BumFot had not issued a public statement about the incident as of this writing.

The combination of name, email address and phone number in the same record makes it easier to craft convincing, targeted phishing or smishing messages.

| Fact | Value |
| --- | --- |
| Disclosed on | September 7, 2026 |
| Accounts affected | 1,300 |
| Sector | Digital services |
| Country | France |
| Cause | Undisclosed |
| Severity | Moderate |
| Status | Confirmed |

## Exposed data

- Full name
- Email address
- Phone number
- Customer ID
- Connection data (IP, logs)

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [BumFot](https://frenchbreaches.com/alertes/bumfot-mtr6jurecstsgtv0ig5) — FrenchBreaches
- [BumFot : une cyberattaque expose les données d'environ 1 300 utilisateurs](https://www.cyberattaque.org/bumfot-une-cyberattaque-expose-les-donnees-denviron-1-300-utilisateurs/) — Cyberattaque.org
- [1 281 comptes concernés par une fuite revendiquée chez BumFot](https://fuitesinfos.fr/article/2026-09-07-bumfot) — Fuites Infos

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-07-bumfot
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees