Observatoire des violations de données
Recherche de fuites de données sensibles sur le dark web
Quatre petites entreprises sur cinq ont subi une violation de données récente. Et un seul incident peut coûter plus de 1 million de dollars à une petite entreprise. Alors pourquoi n'entendons-nous pas plus parler des violations de données ?
Proton n'attend pas que les fuites de données soient signalées. Au lieu de cela, nous allons directement sur le dark web, où nous identifions et partageons les fuites en temps réel, et nous aidons les petites entreprises à se protéger.
Qantas Airways
What happened?
Australia's national airline Qantas Airways Ltd. was targeted by a group of hackers named Scattered Lapsus$ Hunters which launched a ransomware attack(nouvelle fenêtre). The company did not pay the ransom, leading to more than 11 million customer records being leaked on the dark web. Sensitive data including customer names, addresses, and email addresses were exposed, but no financial records appeared. Qantas announced that it has strengthened its security measures following the data breach.
Allianz Life
What happened?
In July 2025, hackers targeted the world's largest insurance company and Europe's largest financial services company Allianz(nouvelle fenêtre) and subsequently stole the personal information of 1 million Allianz customers and employees. Subsequently, information including names, dates of birth, physical addresses, phone numbers, email addresses, and Social Security numbers appeared in a data breach. The breach affected North American customers and employees, and Allianz disclosed the data breach in a legal filing in the US state of Maine.
Tracelo
What happened?
In September 2024, the data of more than 1.4 million customers(nouvelle fenêtre) of the mobile geolocation tracking service Tracelo was leaked on the dark web. A hacker known as Satanic leaked customer names, addresses, phone numbers, email addresses, and passwords following an attack on Tracelo, posting them on the cybercrime forum BreachForums. Tracelo does not appear to have addressed the breach.
INTERSPORT France
What happened?
In France, more than 100,000 customers of sporting goods retailer INTERSPORT(nouvelle fenêtre) had their personal data leaked on BreachForums. Data including names, addresses, phone numbers, and email addresses appeared online in June 2025. INTERSPORT advised that it was addressing the breach, but did not disclose whether it had notified French authorities of the breach.
Free
What happened?
France's second largest ISP and telephone provider Free(nouvelle fenêtre) confirmed in October 2024 that it had been targeted by a data breach. In May 2025, customer data appeared on the dark web: names, dates of birth, phone numbers, email addresses, and IBANs were all leaked. In total, more than 19.5 million records appeared online. The National Commission for Information Technology and Freedoms launched a sanctions procedure against Free in March 2025.
Orange Romania
What happened?
In February 2025, a hacker going by the name Rey obtained more than 3.4 million records from telecoms provider Orange's Romanian branch(nouvelle fenêtre). Data including customer names, dates of birth, addresses, phone numbers, email addresses, usernames, and ID numbers appeared on the dark web following a ransomware attack which Orange declined to pay. Orange is monitoring the attack along with The Romanian National Cybersecurity Directorate (DNSC).
Zacks Investment Research
What happened?
Chicago-based investment research company Zacks Investment Research(nouvelle fenêtre) was breached by hackers in June 2024. In February 2025, customer data including names, addresses, phone numbers, email addresses, usernames, and passwords appeared for sale online. The company has not yet addressed this breach, having now been affected by multiple data breaches in recent years.
SkilloVilla
What happened?
In July 2025, hackers targeted the world's largest insurance company and Europe's largest financial services company Allianz(nouvelle fenêtre) and subsequently stole the personal information of 1 million Allianz customers and employees. Subsequently, information including names, dates of birth, physical addresses, phone numbers, email addresses, and Social Security numbers appeared in a data breach. The breach affected North American customers and employees, and Allianz disclosed the data breach in a legal filing in the US state of Maine.
amai
What happened?
More than 10 million records stolen from Singapore-based eCommerce platform Amai appeared on the dark web in January 2025. Names, addresses, phone numbers, email addresses, and passwords were stolen from the company's customer database. It does not appear that Amai has acknowledged a data breach as of October 2025.
PhoneMondo
What happened?
In January 2025, more than 10.5 million records stolen from German telecommunications platform PhoneMondo appeared on the dark web. Sensitive data includes names, dates of birth, addresses, phone numbers, email addresses, usernames, passwords, and IBANs. As of October 2025, it doesn't appear that PhoneMondo has acknowledged the breach.
Faites en sorte que votre entreprise ne figure pas sur cette liste
Vos mots de passe et l'authentification multifacteur sont votre première ligne de défense contre les pirates informatiques. Découvrez comment des milliers de dirigeants de petites entreprises simplifient la gestion des mots de passe et protègent leurs données.
À propos de l'Observatoire des violations de données
- Qu'est-ce que l'Observatoire des violations de données ?
- Quelles sont les données qui font l'objet de fuites ?
- Pourquoi signaler les violations de données ?
- D'où proviennent vos informations ?
- La divulgation de récentes violations de données ne nuit-elle pas aux entreprises ?