Just received an email from Reglo mobile reporting a data breach. They say some of my registered information may have been compromised. Not particularly worried as I will get a new SIM card when we come over next as the other would have expired anyway. Just thought I would flag the message
In the text message I received from Reglo Mobile, this is the information on the website they say to look at:
Important information about your personal data
Dear Customer, Dear Customer,
We were informed on February 18 that one of our (processors) has been the victim of a computer attack since February 13, 2026, resulting in an unauthorized extraction of personal data associated with your customer account. We sincerely regret this incident and would like to assure you that Réglo Mobile attaches the utmost importance to the security and protection of your data.
What data is concerned? - The information concerned is as follows: last name, first name, postal address, e-mail address, call number, date of birth.
Your bank details (IBAN and/or CB) and password are not affected.
What have we done? - As soon as the incident was discovered, we immediately took all necessary measures to secure your data. The incident was resolved a few hours after its identification, in particular by the correction of the security breach.
In accordance with the regulations, the formalities are in progress with the CNIL, and a complaint has been lodged with the Public Prosecutor.
The potential consequences for you: - In the immediate future, no action on your part is required.
Nevertheless, we invite you to the utmost vigilance, in particular, for any message that seems suspicious.
Our recommendations : - The person(s) responsible for this data breach may use some of the data in order to attempt fraudulent maneuvers with you or third parties, by contacting you by email or telephone (attempts to phish via e-mails, SMS or telephone calls), or by posing as you (identity spoofing on the internet).
We recommend that you be particularly vigilant about possible fraud attempts.
We remind you that Réglo Mobile never asks you (whether by email, SMS or phone) to ask you to communicate in any way your personal codes, identifiers or bank details.
In case of suspicion or abnormal situation, we invite you to contact the official digital victim assistance service on: www.cybermalveillance.gouv.fr to make a report or assert your rights.
To better protect yourself we encourage you to consult these dedicated articles:
https://www.cybermalveillance.gouv.fr/tous-nos-contenus/fiches-reflexes/hameconnage-phishing
https://www.cybermalveillance.gouv.fr/tous-nos-contenus/fiches-reflexes/fraude-faux-conseilleur-bancaire
https://www.cybermalveillance.gouv.fr/tous-nos-contenus/fiches-reflexes/usurpation-identite-que-faire
Service to contact - In case of doubt or question, we have set up a team dedicated to this incident and can be reached free of charge at the following toll-free number: 0805 168 000
That is absolute cr*p! Unilever used the same words when Capita (who administers their pension scheme) was hacked. Unilever continues to use them.
If these companies did attach the utmost importance there wouldn’t be these data breaches.
My brother used to at least for a while work in cyber security for Capita, he left for a better company.
It is pretty shoddy that it always seems to be the outsourced 3rd party service providers that are responsible for the failings.
Indeed, in Capita’s case it was nearly always trying to undercut the competition to win the contract and then finding out they couldn’t .
Sounds like the people who the UK Government hired to provide fibre broadband to the area of Cornwall where my partner lives.
They are now saying “sorry, we’re not going to finish rolling out the connections to the last 7,700 homes because we won’t make a profit doing so.”
After being given a £77m contract to do exactly that. Wazzocks.
We are with Reglo but not had any emails yet about a hack!
Normally a breach of contract
It sounds like they won’t get paid for installations not done, but the Gov is having to get other firms to tender for the remaining work.
If it were me, the contract would have said “do the lot for the fixed price and if it costs you more for some installs, tough…”
That’s how I used to behave when doing my civil servant job. The contract would state what will or will not be done. Much to the raised eyebrows of long standing colleagues. They would also always pay at 30 days from invoice whereas I paid 30 days after work was completed. Got into trouble a few times for not spending the public purse quickly enough.
Great daft parrot-faced ones at that.
Race to the bottom of the IT services swamp …. It’s the company chief technical officers or equivalent who need their bits torching but of course they employ these bottom feeding IT jokes so they can point the finger when it all goes t*ts up
Agreed, a fine of eye watering proportions, and potentially personal criminal repercussions are required to force the profit incenteivised C level to protect clients data. Good security costs. and that is seen as an unnecessary expense. Oh we’re sorry is not good enough.