Carrefour raises alarm over breach involving personal data of Carrefour Mobile customers

French multinational retail and wholesaling corporation Carrefour is warning Belgian Carrefour Mobile customers that their personal information has been compromised in a data breach.

In an online support page, the company states that personal details such as names, dates of birth, email addresses, phone numbers, residential addresses, passport numbers, subscriber numbers, and technical identification data may have been exfiltrated.

Carrefour Mobile is currently working with a cybersecurity and forensic investigation firm to determine the cause and extent of the incident.

As a precaution, Carrefour Mobile's website has been taken offline, meaning customers can’t recover their accounts or manage their personal information. As soon as the website is back online, customers will have to reset their passwords to regain access to their accounts.

Carrefour Mobile recommends not rehashing the same password but creating a strong and unique one. People who use their Carrefour Mobile password for other online services should change these as soon as possible.

Lastly, affected customers are advised to be extra vigilant in the coming months for any attempts at fraud, including spear phishing, voice phishing (vishing), SMS phishing (smishing), or identity theft.

Carrefour is a French multinational retail and wholesaling company located in Massy, France. It operates a chain of hypermarkets, grocery stores, and convenience stores. Carrefour currently has over 14,000 stores in 40 countries with a reported revenue of €87 billion in 2024. The company employs over 325,000 people worldwide.