Ekolis
ModerateConfirmedTransport and travel
On September 5, 2026, an attacker using the alias "4me1" claims to have accessed the admin panel of Ekolis, a French telematics provider for the transport and logistics sector, using an administrator password already exposed in an earlier 2022 leak. On September 12, eight files were posted on a cybercriminal forum: roughly 70,000 rows covering drivers, vehicles (registration plates, VINs, location data) and about 3,272 user accounts with their access rights, spanning hundreds of client transport fleets. Analyses of the published files estimate around 20,700 people are affected. No official statement from Ekolis or the French data protection authority (CNIL) has been identified so far.
Exposure of access accounts and vehicle/driver location data creates a risk of targeted phishing and allows third parties to reconstruct travel habits such as frequently visited sites or parking areas.
- Disclosed on
- September 12, 2026
- Incident dated
- September 5, 2026
- Accounts affected
- 20,702
- Sector
- Transport and travel
- Country
- France
- Cause
- Credential stuffing
Exposed data
- Full name
- Customer ID
- Connection data (IP, logs)
- Employment data
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
- EkolisFrenchBreaches
- Ekolis visé par une cyberattaque : les données de 20 000 personnes exposéesCyberattaque.org
- 20 702 personnes chez Ekolis visées par une fuite de données revendiquéeFuites Infos
- Données télématiques revendiquées chez Ekolis : ce que doivent décider transporteurs et gestionnaires de flottesMaître Reda Kohen, avocat
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact