ZOU ! (Région Sud Provence-Alpes-Côte d'Azur)
HighReportedTransport and travel
On 19 October 2026, a threat actor claimed to hold an 89,083-line membership database attributed to the zou.maregionsud.fr service of the ZOU! regional transport network, with records dating from 2011 to 2026. The sample reviewed by the source contains names, postal addresses, email addresses, mobile phone numbers, birth dates, membership identifiers, registration and last-login dates, and primary and linked accounts, including minors. No passwords or banking data appear in the sample. The database's authenticity and origin are unconfirmed, and the line count does not necessarily match the number of distinct individuals.
Combining identity, contact details and subscription information would let a malicious party run targeted phishing campaigns against members, including minors and their households.
- Disclosed on
- October 19, 2026
- Sector
- Transport and travel
- Country
- France
- Cause
- Undisclosed
Exposed data
- Full name
- Email address
- Phone number
- Postal address
- Date of birth
- Customer ID
- Connection data (IP, logs)
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact