On August 6, Bouygues Telecom, then Air France, underwent large cyber attacks that exhibited millions of personal data: names, addresses, telephone numbers, sometimes even banking info like the Iban.
Advertisement
These kinds of incidents are increasingly often. Companies must protect this data and can take heavy fines, such as Meta which paid 251 million euros in 2024 due to a flaw. But that as a customer, we can directly request compensation from the company when our data is stolen?
Be helped
On the justice side, it is possible, but not simple. To obtain damages, it is necessary to prove three things: that the company has made a fault (for example, that it did not secure enough the data), that this fault caused the flight, and that you have really suffered a damage. The problem is that just the fact that a leak has taken place is not always enough.
We must show that we have suffered real damage, such as a banking scam or identity theft. But the law also begins to recognize moral damage, that is to say stress or invasion of privacy. However, the CNIL (National Commission for Data Protection) can sanction the company by inflicting fines and imposing strict measures to strengthen data protection.
Advertisement
While waiting for justice to take effect, you should especially know how to protect yourself. First, contact the company to find out what was stolen exactly. Change your passwords right away, especially if you use them elsewhere, and activate the double authentication if possible. Remove bank or personal information stored on sites that you no longer use, and close the unnecessary accounts.
Also beware of calls, emails or shady sms: hackers can use it to scam you. Finally, if you are hacking, file a complaint with the police or the gendarmerie, and contact the CNIL if necessary to assert your rights.
It is also important to keep track of all your exchanges with the company and the authorities. This evidence can be useful if you decide to bring the case to court. Finally, stay informed of cybersecurity news to better anticipate and protect your data in the future.
