An intruder may have viewed customer contact details at IT retailer Cybertek

On the afternoon of October 7, Cybertek's teams detected an intrusion on their online store. Someone was exploiting a vulnerability in the cybertek.fr website. Access was blocked that same evening. On October 28, Fuites Infos and Cyberattaque.org relayed the email sent to customers: some customer data may have been viewed.

Cybertek, an IT hardware retailer founded in 1996 in Bordeaux, also operates the Grosbill brand. According to Cyberattaque.org, the group has 28 stores in France under the two brands. The data involved includes first and last names and some or all contact details: email address, phone number and postal address. According to Fuites Infos, not everyone affected necessarily had all of this information exposed.

What Cybertek says, and what it doesn't

According to the email reported by Fuites Infos and Cyberattaque.org, the exploited vulnerabilities were patched on October 9 and, according to Cyberattaque.org, access to the servers was restricted. The retailer states that no data was altered or deleted, and that banking details are not affected.

Several points remain unclear. Cybertek does not say how many customers are affected. It does not say whether the data was only viewed or also copied. It does not describe the vulnerability. Cyberattaque.org also notes that the email says nothing about customer account passwords. The site states that it found no other detailed public statement from the company and says the authenticity of the letter has not been independently confirmed with Cybertek. Neither source reports a claim of responsibility or any sale of the data.

This is not the first time for the group. In September 2024, Cybertek and Grosbill had already warned their customers of unauthorized access to personal data of the same type, Cyberattaque.org recalls. No link has been established between the two incidents.

What to do if you are a customer

No bank card is involved, according to the retailer. But a name, an address and a phone number are enough to build a credible scam.

• Be wary of messages claiming to come from Cybertek, a carrier (blocked package, delivery fees) or a refund service.
• Never share banking details, a password or a code received by text message following a call or message you were not expecting.
• As a precaution, change your Cybertek password, and anywhere else you reused it.
• To check an order, log in to the site yourself, without using a link in a message.

It remains to be seen how many customers are affected, and whether the data will resurface on a resale forum.