Presses universitaires de Franche-Comté (Université Marie-et-Louis-Pasteur)
CriticalConfirmedEducation
Université Marie-et-Louis-Pasteur (UMLP) was alerted on 8 September 2026 by CERT-Renater to a 'web skimming' malicious script on the online store of the Presses universitaires de Franche-Comté (PUFC). The script may have been intercepting bank card data entered by customers at checkout since late 2023. The university took the site offline and is individually contacting the 1,332 customers who made a purchase since December 2023, advising them to monitor their bank accounts. No fraud has been reported so far.
The intercepted bank card data could allow a third party to make fraudulent payments in the affected customers' names.
- Disclosed on
- September 15, 2026
- Accounts affected
- 1,332
- Sector
- Education
- Country
- France
- Cause
- Undisclosed
Exposed data
- Banking data (IBAN, card)
You are only affected if you had an account or an order with this organisation.
What you can do
- Watch your statements. On any unknown debit, block the card and request a refund — French law (art. L133-18) entitles you to it.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
- Presses universitaires de Franche-ComtéFrenchBreaches
- Un script malveillant découvert sur la boutique en ligne des Presses universitaires de Franche-Comtémacommune.info
- Incident de sécurité : les clients des Presses universitaires de Franche-Comté appelés à la vigilanceToutMontbeliard.com
- Pendant près de trois ans un malware a pu espionner les cartes bancaires des clients des Presses universitaires de Franche-Comtécyberattaque.org
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact