---
title: "Data breach at Paymium"
description: "French cryptocurrency exchange Paymium informed its users on September 22, 2026 of a data exposure at its email delivery provider Brevo, whose breach was detected on September 10, 2026. A flaw in Brevo's SSO login system allowed access to 138 business customer accounts, including Paymium's, with con"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-22-paymium
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-22
dateModified: 2026-09-22
---
# Paymium

Data breach — Moderate

French cryptocurrency exchange Paymium informed its users on September 22, 2026 of a data exposure at its email delivery provider Brevo, whose breach was detected on September 10, 2026. A flaw in Brevo's SSO login system allowed access to 138 business customer accounts, including Paymium's, with contact lists exported from 43 of them. Data potentially accessed relates to Paymium user accounts: email, account identifier, name, first name, date of birth, phone number and country of residence; Paymium states that no passwords, API keys, wallet or tax data were accessible from that environment.

The combination of a name, email, phone number and date of birth tied to a known Paymium account enables targeted phishing messages impersonating the platform.

| Fact | Value |
| --- | --- |
| Disclosed on | September 22, 2026 |
| Incident dated | September 10, 2026 |
| Sector | Banking and finance |
| Country | France |
| Cause | Third-party provider |
| Severity | Moderate |
| Status | Confirmed |

## Exposed data

- Email address
- Full name
- Phone number
- Date of birth
- Customer ID

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Paymium](https://frenchbreaches.com/alertes/paymium-mud5fwguie84679mrab) — FrenchBreaches
- [Piratage de Brevo : après Trezor, les données de clients Paymium dans la nature](https://journalducoin.com/actualites/piratage-brevo-trezor-donnees-clients-paymium) — Journal du Coin
- [Paymium : fuite de données chez son prestataire d'e-mails](https://fuitesinfos.fr/article/2026-09-22-paymium) — Fuites Infos
- [Paymium : des données personnelles de clients exposées après une cyberattaque](https://www.cyberattaque.org/paymium-des-donnees-personnelles-de-clients-exposees-apres-une-cyberattaque/) — Cyberattaque.org
- [Brevo victime d'une faille de sécurité : 138 comptes clients compromis](https://frenchbreaches.com/alertes/brevo-mtwuixif0kdw2y7yp3bn) — FrenchBreaches

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-22-paymium
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees