Cookson-CLAL
CriticalConfirmedRetail
Cookson-CLAL, a supplier of precious metals and materials for jewelry, watchmaking and dental work, notified some of its customers that an external provider handling card payment authentication on its site suffered a security incident. The extracted data includes the full card number, expiration date, visual cryptogram (CVV), the name on the card, and the customer's email address. The company has not disclosed the number of affected customers or the exact period of the payments involved.
This complete card data (number, expiry, CVV) could enable fraudulent purchases on websites that do not require strong authentication.
- Disclosed on
- September 30, 2026
- Incident dated
- September 12, 2026
- Sector
- Retail
- Country
- France
- Cause
- Third-party provider
Exposed data
- Banking data (IBAN, card)
- Full name
- Email address
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- Watch your statements. On any unknown debit, block the card and request a refund — French law (art. L133-18) entitles you to it.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact