Paymium
ModerateConfirmedBanking and finance
French cryptocurrency exchange Paymium informed its users on September 22, 2026 of a data exposure at its email delivery provider Brevo, whose breach was detected on September 10, 2026. A flaw in Brevo's SSO login system allowed access to 138 business customer accounts, including Paymium's, with contact lists exported from 43 of them. Data potentially accessed relates to Paymium user accounts: email, account identifier, name, first name, date of birth, phone number and country of residence; Paymium states that no passwords, API keys, wallet or tax data were accessible from that environment.
The combination of a name, email, phone number and date of birth tied to a known Paymium account enables targeted phishing messages impersonating the platform.
- Disclosed on
- September 22, 2026
- Incident dated
- September 10, 2026
- Sector
- Banking and finance
- Country
- France
- Cause
- Third-party provider
Exposed data
- Email address
- Full name
- Phone number
- Date of birth
- Customer ID
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
- PaymiumFrenchBreaches
- Piratage de Brevo : après Trezor, les données de clients Paymium dans la natureJournal du Coin
- Paymium : fuite de données chez son prestataire d'e-mailsFuites Infos
- Paymium : des données personnelles de clients exposées après une cyberattaqueCyberattaque.org
- Brevo victime d'une faille de sécurité : 138 comptes clients compromisFrenchBreaches
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact