Overview

• Auchan reported that names, email and postal addresses, phone numbers, and loyalty card numbers tied to loyalty accounts were stolen.
• The company said passwords, loyalty card PINs, bank information, and the amounts of customers’ loyalty balances were not affected.
• Auchan notified the CNIL as required by French law and has contacted customers whose data was involved.
• The group stated it strengthened security and urged vigilance against phishing, noting it never asks for login details, passwords, or PINs by email, SMS, or phone.
• This marks a repeat incident after a similar attack in November 2024 and follows other major French data breaches reported in 2025, including at Bouygues Telecom.