Eurofiber eurofiber.com

Eurofiber data breach: what happened and what to do

In November 2025, Eurofiber France disclosed a breach of its ticket management platform. About 10,000 email addresses leaked, with a smaller number of names and phone numbers.

View all 13,177 breaches
Breach date
13 Nov 2025
Affected
10,003
Data exposed
Email addresses, Names, Phone numbers
Verified
Yes
Last updated

Source: Have I Been Pwned (CC BY 4.0)

Reviewed by Anthon Wansland

Head of Product & Co-Founder

Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.

What happened

On 13 November 2025, Eurofiber France suffered a breach of its ticket management platform. Have I Been Pwned says the company disclosed it, and data containing 10,003 unique email addresses was subsequently leaked.

According to BleepingComputer, the company warned of the breach after a hacker tried to sell customer data. Eurofiber said a vulnerability was exploited and has since been patched, and that the incident affected only its French business and subsidiaries.

Sources checked: haveibeenpwned.com, bleepingcomputer.com, theregister.com

Last verified against the official page:

How we research this Report an error

What was exposed

The leaked data holds email addresses and a smaller number of names and phone numbers. The person claiming responsibility says they hold more sensitive data, including VPN configuration files and credentials. That is their claim, not something the leaked data has shown.

What that means for you

Business contacts with a name, email and phone number are prime targets for phishing that references real support tickets. Expect messages that look like they come from Eurofiber or a telecom supplier.

What to do

Be suspicious of unexpected messages about tickets, invoices or network access, and confirm them through contacts you already have.

What to do if you were in it

  1. 1

    Expect phishing that mentions the breach

    Support tickets involve real names and contacts, so fake ticket updates can look genuine. Don't click links or call numbers in unexpected messages. Go to the company's site yourself, and report scam messages at reportfraud.ftc.gov.

  2. 2

    Confirm requests through a known contact

    If a message asks for credentials, VPN details or payments, call your Eurofiber contact on a number you already have.

  3. 3

    Change credentials you shared in tickets

    If you ever put a password or VPN detail in a support ticket, change it and any account that shares it.

  4. 4

    Check whether your email or phone is in this and other breaches

    Run a free Serus scan to see which breaches include your email or phone number. Serus also alerts you when your details show up in a new one.

Timeline

  1. The breach happened

  2. Added to Have I Been Pwned

Frequently asked

Was I affected by the Eurofiber breach?

If you're a customer or contact of Eurofiber France, possibly. Search your email on Have I Been Pwned or run a free Serus scan.

What was exposed?

10,003 email addresses and a smaller number of names and phone numbers.

Were other countries affected?

BleepingComputer reports Eurofiber said the incident affected Eurofiber France and its subsidiaries only.

Is the hacker's larger claim true?

A threat actor claims to hold VPN files, credentials and more. That claim is theirs; Have I Been Pwned only lists email addresses, names and phone numbers.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Serus

Check if you're exposed in a breach with Serus

Find your leaks. Get alerted to new ones.

Run a free scan

Related guides

All guides

Related articles

All articles

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.