Auchan reportedly said a cyberattack disclosed on August 21, 2025 affected several hundred thousand customers’ loyalty-account data. The reported information included names, contact details and loyalty-card numbers—not passwords, bank details or loyalty-card PINs. If you receive a message claiming to be from Auchan, verify it through an official channel you reach yourself; do not follow links or prize offers in unexpected messages.
What happened in the August 2025 Auchan breach?
Auchan reportedly disclosed the incident on August 21, 2025. RTL quoted the company describing it as “un acte de cyber malveillance” (“a malicious cyber act”) and saying “l’incident a été circonscrit” (“the incident had been contained”). RTL and other contemporaneous reports said Auchan notified affected customers and the French data-protection regulator, CNIL. These are company statements reported by news outlets, not an independent audit of the incident. RTL’s report on the August 2025 incident, Le Parisien’s report, and BleepingComputer’s report covered the disclosure.
The reports describe the scale as “several hundred thousand” or “a few hundred thousand.” They do not provide an audited exact count, so a more precise figure is not established.
Information reported exposed in 2025
- Names
- Email and postal addresses
- Phone numbers
- Loyalty-card numbers
According to reports quoting Auchan, bank data, passwords and loyalty-card PINs were not affected. The listed exposure concerns identity and contact information tied to loyalty accounts.
Free tools Windows power users keep installed
One-click scans. No signup required.
#1 Best Overall
How the August 2025 incident differs from the November 2024 breach
Auchan had a separately reported incident in November 2024. It also affected several hundred thousand accounts, according to RTL, but the reported data scope was different. Do not assume details from one incident apply to the other.
| Incident | Reported exposed data | Reported unaffected data and response |
|---|---|---|
| August 2025 | Names, contact information and loyalty-card numbers | Auchan reportedly said bank data, passwords and loyalty-card PINs were not affected; it said the incident had been contained. |
| November 2024 | Names, contact information, loyalty-card numbers and balances; family links where customers had provided them | Auchan reportedly said passwords and bank details were not exposed and that it strengthened checks when loyalty balances were redeemed. |
The November 2024 details come from RTL’s report on the 2024 incident. The loyalty-balance and optional family-link details belong to that earlier event, not the August 2025 report.
How to find out whether your data was affected
Contact Auchan through an official customer-service channel or account page that you locate independently. CNIL says it cannot confirm whether a particular person’s information appears in a breach file; the organization concerned is the appropriate place to ask. CNIL also warns against third-party websites that claim to check whether your personal data appears in leaked files. See CNIL’s guidance on data breaches.
How to handle suspicious Auchan messages
Exposed contact details can make unsolicited messages more convincing, but the available reports do not establish that a particular scam campaign resulted from this breach. Auchan’s consumer-alert page warns of fraudulent emails, texts and calls impersonating Auchan or its partners, including fake “€500 voucher” and other prize claims. The alert says Auchan Retail France is not running that promotion. Check Auchan’s fraud alert directly rather than trusting a message that points you to it.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →- Do not open unexpected attachments, reply to suspicious messages or click their login links.
- Open Auchan’s website or app using an address or bookmark you already trust, then check your account or contact customer service.
- Do not provide passwords, card details or verification codes in response to an unsolicited email, text or call.
- If you suspect identity theft, follow CNIL’s official guidance, report it to police or the gendarmerie, and notify your bank if relevant.
Should you change your Auchan password?
Auchan reportedly said passwords were not exposed in either incident, so the reports do not establish a breach-specific need to reset an Auchan password. If you reused that password on another service, change it there—and anywhere else you reused it—as a precaution. Use a unique, strong password for each account and enable multifactor authentication on trusted services where available. CNIL recommends these account-security practices, particularly when a password is known to have appeared in a breach.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
