Colisport
ModerateReportedTransport and travel
A database attributed to Colisport, a French platform for booking the transport of bulky parcels, was published on 21 September 2026 on a data-leak forum. The poster claims to have exploited accessible APIs on the site, after creating an account, to retrieve around 19,741 request and shipment records, said to correspond to roughly 8,032 distinct individuals and businesses (senders, recipients and billing account holders). Exposed data reportedly includes names, email addresses, phone numbers, postal addresses, identifiers and order history. Colisport has not publicly addressed the claim.
This contact and shipment information could be used for phishing attempts or fraudulent calls impersonating a carrier or delivery service.
- Disclosed on
- September 21, 2026
- Accounts affected
- 8,032
- Sector
- Transport and travel
- Country
- France
- Cause
- Misconfigured database
Exposed data
- Full name
- Email address
- Phone number
- Postal address
- Customer ID
- Employment data
- Order history
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact