Caridro Val de Loire

ModerateReportedIndustrySeptember 13, 2026

The Qilin ransomware group claimed, on 13 September 2026, an intrusion at Caridro Val de Loire, an industrial coachbuilder based in Esvres (Indre-et-Loire, France), and published several hundred internal files on its leak site. The documents reportedly cover the company's commercial activity (client files, maintenance contracts, order book, pricing), its suppliers and responses to public tenders, including a contract with the city of Tours, as well as a folder dedicated to passwords whose content is not specified. At this stage, the claim has not been publicly confirmed by the company.

Genuine commercial documents would make targeted phishing or supplier-fraud attempts against the company's clients, suppliers and partners more credible.

Disclosed on: September 13, 2026
Sector: Industry
Country: France
Cause: Ransomware

Exposed data

Employment data
Order history
Password (hashed)
Other personal data

You are only affected if you had an account or an order with this organisation.

What you can do

Change that password — and everywhere you reused it. That is how a leak spreads to your other accounts.
Turn on two-factor authentication on the affected accounts: a stolen password is then no longer enough.
You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

Sources

Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact