---
title: "Data breach at WiziShop"
description: "WiziShop informed its customers that a malicious third party had exploited a security flaw to download a large volume of invoices issued since 2009 under its WiziShop, Dropizi and Evolup services. The company states it was alerted on 17 August 2026, fixed the vulnerability the same day, and reported"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-10-wizishop
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-10
dateModified: 2026-09-10
---
# WiziShop

Data breach — Moderate

WiziShop informed its customers that a malicious third party had exploited a security flaw to download a large volume of invoices issued since 2009 under its WiziShop, Dropizi and Evolup services. The company states it was alerted on 17 August 2026, fixed the vulnerability the same day, and reported the incident to France's data protection authority (CNIL). Exposed invoices may contain the customer's name, postal address, customer number, and billing references, dates and amounts; WiziShop states that banking details, login credentials and passwords were not affected.

The combination of a real customer number, an invoice reference and an exact amount could let a third party craft highly credible fraudulent messages, for example to redirect a payment to a different bank account.

| Fact | Value |
| --- | --- |
| Disclosed on | September 10, 2026 |
| Incident dated | August 17, 2026 |
| Sector | Digital services |
| Country | France |
| Cause | Misconfigured database |
| Severity | Moderate |
| Status | Confirmed |

## Exposed data

- Full name
- Postal address
- Customer ID
- Order history
- Employment data

## What you can do

- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [WiziShop (DropIZI)](https://frenchbreaches.com/alertes/wizishop-dropizi-mtw3klqur74gdjp72ya) — FrenchBreaches
- [Piratage de Dropizi : des factures clients compromises depuis 2009](https://frenchbreaches.com/alertes/wizishop-dropizi-mszyv230fxhdpsb7ppo) — FrenchBreaches
- [WiziShop et Dropizi : des factures de boutiques publiées, ce que doivent décider marchands et partenaires](https://kohenavocats.fr/2026/09/11/wizishop-dropizi-factures-boutiques-partenaires-2026/) — Kohen Avocats

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-10-wizishop
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees