---
title: "Data breach at TSC (groupe LMT)"
description: "A cyberattack targeted the website of TSC, a Latvian electronics and household appliance repair company belonging to the LMT group, in early September 2026. An attacker exploited a website vulnerability to access the customer database and extract personal data, then attempted to extort payment in ex"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-23-tsc-groupe-lmt
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-23
dateModified: 2026-09-23
---
# TSC (groupe LMT)

Data breach — Critical

A cyberattack targeted the website of TSC, a Latvian electronics and household appliance repair company belonging to the LMT group, in early September 2026. An attacker exploited a website vulnerability to access the customer database and extract personal data, then attempted to extort payment in exchange for not disclosing it. Latvian State Police arrested a 23-year-old suspect on 15 September 2026, linking this attack to an earlier one against another company in February 2026. Investigators state the stolen data was not passed on to third parties.

The exposed data (contact details, device and building access codes, bank-account numbers, addresses) could enable targeted fraud or unauthorized physical access to affected customers' homes.

| Fact | Value |
| --- | --- |
| Disclosed on | September 23, 2026 |
| Sector | Retail |
| Country | Latvia |
| Cause | Misconfigured database |
| Severity | Critical |
| Status | Confirmed |

## Exposed data

- Phone number
- Postal address
- Banking data (IBAN, card)
- Other personal data

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- Watch your statements. On any unknown debit, block the card and request a refund — French law (art. L133-18) entitles you to it.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Latvia arrests suspected hacker for electronics repair company breach](https://databreaches.net/2026/09/23/latvia-arrests-suspected-hacker-for-electronics-repair-company-breach/) — DataBreaches.net
- [Latvia arrests suspected hacker for electronics repair company breach](https://therecord.media/latvia-hacker-arrest-cyberattack) — The Record
- [Hacker detained in Latvia for at least two cyberattacks](https://eng.lsm.lv/article/society/crime/23.09.2026-hacker-detained-in-latvia-for-at-least-two-cyberattacks.a664394/) — LSM.lv
- [Hacker arrested over cyberattacks on at least two Latvian companies](https://bnn-news.com/hacker-arrested-over-cyberattacks-on-at-least-two-latvian-companies-284067) — Baltic News Network

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-23-tsc-groupe-lmt
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees