Overview

• The retailer reports that names, email and postal addresses, phone numbers and loyalty card numbers were taken from loyalty accounts.
• The company says no bank details, passwords, loyalty card PINs or loyalty balances were accessed.
• Auchan has notified affected customers and France’s data watchdog CNIL in line with breach-reporting rules.
• The group says the incident has been contained and that strengthened monitoring and additional security measures are in place.
• The attack follows earlier large French breaches, including a November 2024 hit on Auchan and an early August leak at Bouygues Telecom affecting over six million accounts.