---
title: "Data breach at Portalia"
description: "Portalia, a French payroll-outsourcing (umbrella company) firm affiliated with the Mantu group, has been the subject since September 28, 2026 of a data leak claim posted on a cybercriminal forum by an actor named ChimeraZ. The post claims around 21,698 records and 22,221 files (2.8 GB) covering roug"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-28-portalia
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-28
dateModified: 2026-09-28
---
# Portalia

Data breach — Critical

Portalia, a French payroll-outsourcing (umbrella company) firm affiliated with the Mantu group, has been the subject since September 28, 2026 of a data leak claim posted on a cybercriminal forum by an actor named ChimeraZ. The post claims around 21,698 records and 22,221 files (2.8 GB) covering roughly 1,069 contracted consultants, with documents spanning 2017-2026. A sample shows a payslip containing name, postal address, national insurance number, employee ID, contract type, and pay amounts.

The combination of a national insurance number, postal address, and full payroll data exposes the individuals concerned to a heightened risk of identity theft and social-benefit fraud.

| Fact | Value |
| --- | --- |
| Disclosed on | September 28, 2026 |
| Accounts affected | 1,069 |
| Sector | Employment and HR |
| Country | France |
| Cause | Undisclosed |
| Severity | Critical |
| Status | Confirmed |

## Exposed data

- Full name
- Postal address
- Social security number
- Customer ID
- Employment data

## What you can do

- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Portalia](https://frenchbreaches.com/alertes/portalia-mukjf8v1pk2fw5xkrf) — FrenchBreaches
- [Cyberattaque chez Portalia : 22 000 documents en fuite](https://www.cyberattaque.org/cyberattaque-chez-portalia-22-000-documents-en-fuite/) — Cyberattaque.org
- [Portalia : fuite de données revendiquée visant 1 069 consultants](https://fuitesinfos.fr/article/2026-09-28-portalia) — Fuites Infos

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-28-portalia
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees