Assu-Risk (Assupro)
CriticalReportedInsurance
An SQL backup of a customer relationship management system associated with Assu-Risk (Assupro), an insurance company, was identified and described on 14 October 2026. According to the file metadata, it was generated on 6 October 2024. It contains customer and prospect contact details, dates of birth, company information, insurance contracts, invoices and bank details fields including IBANs, as well as user accounts and connection histories. The number of people affected is not established: the source mentions up to 56,000 people without a count of unique individuals, and reports 29,554 customer records and 39,410 contact records, which do not necessarily correspond to distinct people.
Contact details, dates of birth and contract or bank references could allow a malicious third party to run targeted phishing attempts or impersonate the insurer.
- Disclosed on
- October 14, 2026
- Sector
- Insurance
- Country
- International or undetermined
- Cause
- Undisclosed
Exposed data
- Full name
- Email address
- Phone number
- Postal address
- Date of birth
- Employment data
- Banking data (IBAN, card)
- Customer ID
- Connection data (IP, logs)
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- Watch your statements. On any unknown debit, block the card and request a refund — French law (art. L133-18) entitles you to it.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact