---
title: "Data breach at Caridro Val de Loire"
description: "The Qilin ransomware group claimed, on 13 September 2026, an intrusion at Caridro Val de Loire, an industrial coachbuilder based in Esvres (Indre-et-Loire, France), and published several hundred internal files on its leak site. The documents reportedly cover the company's commercial activity (client"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-13-caridro-val-de-loire
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-13
dateModified: 2026-09-13
---
# Caridro Val de Loire

Data breach — Moderate

The Qilin ransomware group claimed, on 13 September 2026, an intrusion at Caridro Val de Loire, an industrial coachbuilder based in Esvres (Indre-et-Loire, France), and published several hundred internal files on its leak site. The documents reportedly cover the company's commercial activity (client files, maintenance contracts, order book, pricing), its suppliers and responses to public tenders, including a contract with the city of Tours, as well as a folder dedicated to passwords whose content is not specified. At this stage, the claim has not been publicly confirmed by the company.

Genuine commercial documents would make targeted phishing or supplier-fraud attempts against the company's clients, suppliers and partners more credible.

| Fact | Value |
| --- | --- |
| Disclosed on | September 13, 2026 |
| Sector | Industry |
| Country | France |
| Cause | Ransomware |
| Severity | Moderate |
| Status | Reported |

## Exposed data

- Employment data
- Order history
- Password (hashed)
- Other personal data

## What you can do

- Change that password — and everywhere you reused it. That is how a leak spreads to your other accounts.
- Turn on two-factor authentication on the affected accounts: a stolen password is then no longer enough.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Caridro Val de Loire : fuite de données revendiquée sur des fichiers internes](https://fuitesinfos.fr/article/2026-09-13-caridro-val-de-loire) — Fuites Infos
- [Caridro Val de Loire : des centaines de fichiers internes publiés après une cyberattaque](https://www.cyberattaque.org/caridro-val-de-loire-des-centaines-de-fichiers-internes-publies-apres-une-cyberattaque/) — Cyberattaque.org
- [CARIDRO VAL DE LOIRE cible d'une cyberattaque : une fuite de données revendiquée](https://frenchbreaches.com/alertes/caridro-val-de-loire-rw_UTBGU1NVUlNUeUJXUVV3Z1JFVWdURTlKVWtWQWNXbHNhVzQ9) — FrenchBreaches
- [Qilin Ransomware Hits French Organization CARIDRO VAL DE LOIRE](https://www.dexpose.io/qilin-ransomware-hits-french-organization-caridro-val-de-loire/) — DeXpose
- [Ransomware.live - Victim: CARIDRO VAL DE LOIRE](https://ransomware.live/id/Q0FSSURSTyBWQUwgREUgTE9JUkVAcWlsaW4=) — ransomware.live

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-13-caridro-val-de-loire
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees