French Payment Agency Data Breach Exposes 143,000 Beneficiaries

The Agence de services et de paiement (ASP) has confirmed a data breach occurring on August 27, 2026, following unauthorized access to a user account. The incident exposed personal information, including names, addresses, beneficiary numbers, and IBAN/BIC details, from 2023-2024 payment notices for the Île-de-France energy subsidy. While the agency did not specify the number of victims, cybercrime forums claim 143,518 records were compromised. This marks the second such security incident at the agency within five months.