---
title: "Data breach at Citya Immobilier"
description: "Snexi, a French property-diagnostics and inventory service provider belonging to the Arche group, confirmed being hit by a cyberattack on 2 September 2026 and notified the incident to the CNIL. On 11 September 2026, a hacker claimed to be distributing a database of about 2.25 million rows covering r"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-11-citya-immobilier
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-11
dateModified: 2026-09-11
---
# Citya Immobilier

Data breach — High

Snexi, a French property-diagnostics and inventory service provider belonging to the Arche group, confirmed being hit by a cyberattack on 2 September 2026 and notified the incident to the CNIL. On 11 September 2026, a hacker claimed to be distributing a database of about 2.25 million rows covering roughly 1,139,584 people and 1,833 agencies, a large share of it tied to the Citya Immobilier network. Samples reviewed by specialist outlets include tenants' and owners' names and contact details, precise property addresses, and, for about 50,000 records, the building's door access code.

Pairing a precise address with a door access code lets a third party identify and physically access a specific home.

| Fact | Value |
| --- | --- |
| Disclosed on | September 11, 2026 |
| Incident dated | September 2, 2026 |
| Accounts affected | 1.1M |
| Sector | Other |
| Country | France |
| Cause | Third-party provider |
| Severity | High |
| Status | Confirmed |

## Exposed data

- Full name
- Email address
- Phone number
- Postal address
- Other personal data

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [2,2 millions de lignes et 50 000 digicodes liées à Citya en fuite après la cyberattaque contre Snexi](https://www.cyberattaque.org/citya-snexi-fuite-de-donnees-cyberattaque/) — Cyberattaque.org
- [Snexi confirme une fuite de données après une cyberattaque](https://www.cyberattaque.org/snexi-confirme-une-fuite-de-donnees-apres-une-cyberattaque/) — Cyberattaque.org
- [Fuite de données SNEXI : 1,14 million de propriétaires et locataires](https://frenchbreaches.com/alertes/snexi-citya-immobilier-mtwb9nopcz1weg06yq7) — FrenchBreaches
- [Fuite de données chez SNEXI : des informations sur des propriétaires](https://frenchbreaches.com/alertes/snexi-mtndjyfm1p926jbh30z) — FrenchBreaches
- [Immobilier : une série de fuites de données expose des millions de Français](https://frenchbreaches.com/blog/immobilier-une-serie-de-fuites-de-donnees-expose-des-millions-de-francais) — FrenchBreaches
- [Snexi piraté : ce que doivent décider agences immobilières et donneurs d'ordre](https://kohenavocats.fr/2026/09/13/snexi-fuite-donnees-agences-donneurs-ordre-decisions-2026/) — Maître Reda Kohen
- [Snexi attaquée : ce que doivent décider agences, diagnostiqueurs et gestionnaires](https://kohenavocats.fr/2026/09/09/snexi-prestataire-diagnostics-agences-gestionnaires-2026/) — Maître Reda Kohen
- [Snexi, entreprise de Tours membre du groupe Arche Immobilier, victime d'une cyberattaque](https://www.titrespresse.com/20543252603/snexi-tours-arche) — Titrespresse
- [Fuite de données chez Snexi](https://fuitesinfos.fr/article/2026-09-07-snexi) — Fuites Infos

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-11-citya-immobilier
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees