---
title: "Data breach at Relais Colis"
description: "On September 24, 2026, a hacker identifying as pro-Russian published on a hacker forum a database attributed to Relais Colis, around 12.9 million lines corresponding to roughly 6.2 million people. Several outlets link this data to a security incident Relais Colis had already confirmed by email to it"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-24-relais-colis
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-24
dateModified: 2026-09-24
---
# Relais Colis

Data breach — High

On September 24, 2026, a hacker identifying as pro-Russian published on a hacker forum a database attributed to Relais Colis, around 12.9 million lines corresponding to roughly 6.2 million people. Several outlets link this data to a security incident Relais Colis had already confirmed by email to its customers in February 2026, following the compromise of an access credential, and reported to France's data protection authority (CNIL). The categories involved are names, postal addresses, email addresses and phone numbers; the company had stated at the time that banking data and passwords were not affected.

The combination of name, postal address, email and phone number enables highly credible phishing or smishing messages impersonating Relais Colis, a misuse already observed after an earlier leak affecting the same company.

| Fact | Value |
| --- | --- |
| Disclosed on | September 24, 2026 |
| Accounts affected | 6.2M |
| Sector | Transport and travel |
| Country | France |
| Cause | Credential stuffing |
| Severity | High |
| Status | Confirmed |

## Exposed data

- Full name
- Email address
- Phone number
- Postal address

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Relais Colis : une fuite revendiquée par un pirate qui veut se venger !](https://www.zataz.com/relais-colis-une-fuite-revendiquee-par-un-pirate-qui-veut-se-venger/) — Zataz
- [Relais Colis confirme un piratage avec vol de données personnelles](https://kulturegeek.fr/news-345422/relais-colis-confirme-piratage-vol-donnees-personnelles) — KultureGeek
- [Relais Colis annonce (encore) avoir été piraté avec une fuite de données](https://kulturegeek.fr/news-346954/relais-colis-annonce-ete-pirate-fuite-donnees) — KultureGeek
- [Relais Colis piraté : les données de 6,2 millions de personnes refont surface](https://frenchbreaches.com/blog/relais-colis-pirate-les-donnees-de-62-millions-de-personnes-refont-surface) — French Breaches
- [Relais Colis piraté en janvier 2026, base republiée en septembre](https://kohenavocats.fr/2026/09/27/relais-colis-base-republiee-commercants-ecommercants-decisions-2026/) — Kohen Avocats
- [Encore une fuite de données chez Relais Colis, avec des dangers concrets pour les victimes](https://www.phonandroid.com/encore-une-fuite-de-donnees-chez-relais-colis-avec-des-dangers-concrets-pour-les-victimes.html) — Phonandroid
- [Relais Colis confirme une cyberattaque massive et une fuite de données](https://www.generation-nt.com/actualites/relais-colis-cyberattaque-donnees-personnelles-piratage-phishing-2069228) — Generation-NT

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-24-relais-colis
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees