Eurofiber data breach: what happened and what to do
In November 2025, Eurofiber France disclosed a breach of its ticket management platform. About 10,000 email addresses leaked, with a smaller number of names and phone numbers.
View all 13,177 breaches- Breach date
- 13 Nov 2025
- Affected
- 10,003
- Data exposed
- Email addresses, Names, Phone numbers
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
On 13 November 2025, Eurofiber France suffered a breach of its ticket management platform. Have I Been Pwned says the company disclosed it, and data containing 10,003 unique email addresses was subsequently leaked.
According to BleepingComputer, the company warned of the breach after a hacker tried to sell customer data. Eurofiber said a vulnerability was exploited and has since been patched, and that the incident affected only its French business and subsidiaries.
Sources checked: haveibeenpwned.com, bleepingcomputer.com, theregister.com
Last verified against the official page:
What was exposed
The leaked data holds email addresses and a smaller number of names and phone numbers. The person claiming responsibility says they hold more sensitive data, including VPN configuration files and credentials. That is their claim, not something the leaked data has shown.
What that means for you
Business contacts with a name, email and phone number are prime targets for phishing that references real support tickets. Expect messages that look like they come from Eurofiber or a telecom supplier.
What to do
Be suspicious of unexpected messages about tickets, invoices or network access, and confirm them through contacts you already have.
What to do if you were in it
- 1
Expect phishing that mentions the breach
Support tickets involve real names and contacts, so fake ticket updates can look genuine. Don't click links or call numbers in unexpected messages. Go to the company's site yourself, and report scam messages at reportfraud.ftc.gov.
- 2
Confirm requests through a known contact
If a message asks for credentials, VPN details or payments, call your Eurofiber contact on a number you already have.
- 3
Change credentials you shared in tickets
If you ever put a password or VPN detail in a support ticket, change it and any account that shares it.
- 4
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see which breaches include your email or phone number. Serus also alerts you when your details show up in a new one.
Timeline
-
The breach happened
-
Added to Have I Been Pwned
Frequently asked
Was I affected by the Eurofiber breach?
If you're a customer or contact of Eurofiber France, possibly. Search your email on Have I Been Pwned or run a free Serus scan.
What was exposed?
10,003 email addresses and a smaller number of names and phone numbers.
Were other countries affected?
BleepingComputer reports Eurofiber said the incident affected Eurofiber France and its subsidiaries only.
Is the hacker's larger claim true?
A threat actor claims to hold VPN files, credentials and more. That claim is theirs; Have I Been Pwned only lists email addresses, names and phone numbers.
Sources
Something wrong or out of date? Tell us and we'll re-check it.