Mondial Relay cyberattack: be vigilant against fraud attempts

Mondial Relay victim of a cyberattack

Mondial Relay has confirmed that it was the target of a cyberattack on Tuesday, 23 December 2025. The incident, which was made public on 27 December, resulted in the exposure of certain personal data belonging to customers.

The information concerned includes:

• first and last names
• e-mail and postal addresses
• telephone numbers
• logistical data (order numbers, shipping numbers, parcel tracking)

The company states that no bank details, passwords or payment methods were compromised.

Potentially affected customers have been notified by email. Mondial Relay has also notified the CNIL (French Data Protection Authority) and indicated its intention to file a complaint. The investigation is still ongoing and the exact number of people affected remains unknown at this time.

Ongoing fraud attempts: remain vigilant

Although this data has no direct banking value, it can be exploited in targeted fraud attempts, particularly via email or text message, by individuals posing as Mondial Relay or a retailer.

Example of a fraudulent message received:

Notification of unsuccessful delivery attempt – Action required to reschedule

⚠️ This type of message is fraudulent. No payment or confirmation of personal information is required through this channel.

When the parcel is deposited at a collection point, the recipient has 5 clear days to collect it.

After this period, the parcel is automatically returned to the sender.

This return incurs new delivery charges, as the initial transport has already been carried out.

Responsibility and verification of information

We would like to clarify that we are not responsible for this cyberattack, which concerns an external service provider.

Recommended procedure

1. Log in to your customer account on our website.
2. Go to the Order History section.
3. Check the official tracking number associated with your order.
4. Check the actual status of your delivery directly from this interface.

Do not use any links received by email or SMS to carry out these checks.

However, to ensure your security, all checks must be carried out exclusively from your customer area on our website.

Many fraud attempts rely on websites that visually imitate official websites.

Our recommendations

• Never click on a link contained in an unsolicited message.
• Never disclose your personal or banking information by email or SMS.
• Always check your orders from your customer account.
• If in doubt, delete the message.