TotalEnergies Marketing France
CriticalConfirmedEnergy
TotalEnergies Marketing France informed members of its Le Club loyalty program that a security incident at a technical service provider allowed an unauthorized third party to extract some of their personal data. According to the email sent to customers, the exposed data includes identification information, Le Club account details and loyalty transaction history; no banking data was affected. The incident was reported to the CNIL, with no disclosed intrusion date or number of people affected.
Combining a real identity, a loyalty account and a transaction history can make phishing messages impersonating TotalEnergies more convincing.
- Disclosed on
- September 18, 2026
- Sector
- Energy
- Country
- France
- Cause
- Third-party provider
Exposed data
- Identity document
- Customer ID
- Order history
You are only affected if you had an account or an order with this organisation.
What you can do
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
- Le Club TotalEnergies touché par une cyberattaque : les historiques de transactions en fuiteCyberattaque.org
- TotalEnergies : fuite de données chez Le Club, des données de fidélité exposéesFuites Infos
- TotalEnergies victime d'une fuite de données : des clients du Club touchésFrenchBreaches
- Piratage chez TotalEnergies : des données de clients du Club ont été voléesFrenchBreaches
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact