Chez Switch, a French energy and mobile operator, has allegedly been compromised following a cyberattack that occurred in February 2025. The incident came to light when a threat actor leaked a database containing 19,313 customer records on a cybercrime forum. The individual responsible for the leak claims that the data was published because the company failed to respond to previous ransom requests. While the actor also claims to possess high-resolution images of identification documents (IDs, passports, and proofs of address), they stated these would not be published on the forum due to site rules.
According to the actor, the compromised database contains a wide range of sensitive personal and financial information. The allegedly compromised data includes:
-
Full names (First and Last)
-
Email addresses
-
Phone numbers (Mobile and Fixed)
-
Hashed passwords (Bcrypt and Argon2)
-
Dates of birth and ages
-
Birth cities and countries
-
Full physical addresses
-
IBANs and BIC codes
