Breaches and incidents
Maileva / Docaposte (France): attempts to hijack customer accounts to send letters, platform shut six days
Per Solutions Numeriques, Docaposte described “unauthorized access attempts by a cybercriminal to send illegitimate letters” via its Maileva online mail...
- Disclosed
- Verification
- Reported by a reputable outlet, citing the company
What happened
- Per Solutions Numeriques, Docaposte described “unauthorized access attempts by a cybercriminal to send illegitimate letters” via its Maileva online mail platform; the incident was revealed on 24 Sep and the platform was down from 23 Sep 7:00 until 29 Sep for all customers.
- Root cause: not disclosed; the number of targeted accounts and the method were unknown (the article lists stolen credentials, missing 2FA or a platform flaw as unconfirmed possibilities).
- No attacker named.
- Docaposte blocked the targeted accounts, shut the whole service as a precaution and filed a complaint; it was not known whether fraudulent letters were actually sent.