Cyberattack on Netim: What really happened

In late June 2026, we identified an intrusion into an internal development environment that was isolated from our production systems. As soon as the intrusion was detected, access was immediately disabled and the environment was secured.

Our internal investigations showed that this environment contained predominantly old data (dating from before 2024), as well as fictitious or anonymised data. A very limited amount of genuine personal data relating to certain former customers was nevertheless identified: first name, last name, postcode and city. No passwords, banking details, email addresses or full postal addresses were present in this dataset, and no account data was affected.

The source code present in this environment was also an old version that has since undergone extensive modifications and bears no relation to the code currently in production. No payment data (bank cards, Stripe or PayPal) from our production systems was involved in this incident: this development environment has never been connected to our production payment systems.

In accordance with our obligations, the incident was reported to the CNIL as soon as it was detected, in late June 2026. Given the very limited nature of the personal data involved, individual notification of customers was not deemed necessary.

Independently of this incident, the security of our systems has been subject to an ongoing programme of measures for several years, including regular penetration testing, a vulnerability disclosure programme (VDP) already in place, and the upcoming launch of a bug bounty programme.

If you have any questions, our support team remains available at support@netim.com.

Kind regards,

Sébastien Almiron
Chief Executive Officer