Colis Privé Data Breach: 12,803,466 Records With Contact Details

HEROIC analysts logged a data breach record under the name Colis Privé, dated November 22, 2025. It holds 12,803,466 records with email addresses, first and last names and phone numbers. You will not know whether your own details are among them without a scan.

What Contact Details Alone Can Be Used For

The record lists no password, so it does not open a sign-in. Its risk is persuasion. A message that opens with your name and arrives at your email address is harder to dismiss, and a text to your own number carries more weight than a random one. Details of this kind suit phishing and scam calls.

The Four Items in Each Record

• Email addresses, which can receive phishing messages written to look personal.
• First names, which let a message begin with a familiar greeting.
• Last names, which complete the name on a message or a call.
• Phone numbers, which can be called or texted by a scammer.

How Scammers Use a Name and a Number

A sender who knows a name and a number can send a text that appears to expect a reply, or place a call that sounds informed. Such messages can ask for a click, a code or a payment. Because the record lists no password, the first sign of trouble may be a message rather than a failed login.

How a Database Record Takes Shape

A database record is copied out of one source's own systems, not collected from individual devices. Every row follows the same layout, which is why emails, names and phone numbers sit together on one line. Colis Privé is the label attached to this record; this post says nothing about what the source does or where it operates.

Are Your Details on This List?

Find out where you stand: scan your email and see your information. If it matches, add a PIN to your phone carrier, ignore links in texts you did not expect, and be careful with calls that quote your name. Your work email address belongs in the scan along with your personal one.