Autosur hacked, but the inspection network won't say which data was hit

On October 31, a listing appeared on a cybercriminal forum. Its author claimed to be selling a database taken from autosur.fr, the vehicle inspection brand. They advertised 798,502 rows in two files, said to correspond to 615,233 people. The next day, November 1, Autosur acknowledged an intrusion into its systems.

The confirmation came in writing, in response to the specialist site Fuites Infos. According to Fuites Infos, the data protection officer of SECTA, the company that operates the Autosur and Diagnosur brands, replied that SECTA's teams isolated the system as soon as they detected the intrusion, in order to stop it. According to Fuites Infos, the company notified the CNIL (the French data protection authority) and filed a criminal complaint. It did not specify which data was affected or how many customers are concerned.

Does the database for sale come from this intrusion?

Nothing proves it so far. Autosur's reply says nothing about the database for sale or its size, and the link between the two remains to be established. According to Fuites Infos, Autosur acknowledges an incident affecting about fifty of its inspection centers. For its part, the Cyberattaque.org watchdog notes that the first files examined seem to point to a single center in Haute-Saône rather than the whole network.

According to the seller's listing, the database contains customers' last names, first names, phone numbers and email addresses, along with internal identifiers. Fuites Infos examined a sample of 1,000 rows: it contains no postal address, no license plate number, no password and no bank details. A useful reminder: 615,233 is the figure put forward by the seller, not a confirmed number of victims.

This is not the first time

Autosur has already suffered leaks. In March 2025, the brand acknowledged a security incident that exposed customer contact details and license plate numbers, and the victim counts varied widely from one outlet to another. Fuites Infos also lists a leak in June 2026. According to the site, the current sample does not have the same structure as those two databases, and no direct link has been established. The vehicle inspection sector appears to be a target: a few days earlier, hackers claimed to have stolen the appointments booked on the Auto-Planning platform.

What to do if you are a customer

A name tied to a phone number and an email address is enough to build a credible scam: a fake center offering to move your appointment, a fake penalty to pay, a payment link.

• Do not click any link received by email or text message in Autosur's name: go through the official website or app.
• Never give a code received by text message, a password or a card number to someone who calls you, even if they know your name and your vehicle.
• If in doubt, or if you are scammed, the public service cybermalveillance.gouv.fr helps victims free of charge.

It remains to be seen how many customers Autosur will notify, and whether the brand will acknowledge that the database for sale comes from its systems.