---
title: "Data breach at DECOClim"
description: "DECOClim, a company based in the Var region selling decorative covers for air conditioning units and heat pumps online, emailed its customers on 29 September 2026 to disclose unauthorized access to its customer database. Data potentially exposed includes identity, postal address, email address, phon"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-29-decoclim
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-29
dateModified: 2026-09-29
---
# DECOClim

Data breach — Critical

DECOClim, a company based in the Var region selling decorative covers for air conditioning units and heat pumps online, emailed its customers on 29 September 2026 to disclose unauthorized access to its customer database. Data potentially exposed includes identity, postal address, email address, phone number, and order-related information; the company states no banking data was involved. The number of people affected, the date of access, and how it occurred were not disclosed.

The combination of name, contact details, and order information could be used to craft convincing phishing messages or fraudulent calls impersonating DECOClim.

| Fact | Value |
| --- | --- |
| Disclosed on | September 29, 2026 |
| Sector | Retail |
| Country | France |
| Cause | Undisclosed |
| Severity | Critical |
| Status | Confirmed |

## Exposed data

- Identity document
- Postal address
- Email address
- Phone number
- Order history

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [DECOClim : fuite de données confirmée chez des clients](https://fuitesinfos.fr/article/2026-09-29-decoclim) — Fuites Infos
- [DECOClim confirme une cyberattaque : les commandes sont exposées](https://www.cyberattaque.org/decoclim-confirme-une-cyberattaque-les-commandes-sont-exposees/) — cyberattaque.org

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-29-decoclim
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees