On March 30, 2026, the French telecommunications provider Iliad appeared on the leak site of the ransomware group ALP-001. Internal files were allegedly exfiltrated during a ransomware attack, with the group setting an extortion deadline of April 11, 2026. While the exact number of people affected remains unknown, anyone who has interacted with Iliad’s broadband, mobile, or telephony services could have personal data exposed in the stolen files.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch iliad.fr
Get alerted the next time iliad.fr files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about iliad.fr’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates that ALP-001 claims to have stolen internal documents from Iliad, a company founded in 1999 and headquartered in Paris that generated $11.7 billion in revenue. The data was taken from private storage systems during a ransomware incident. Samples of the material are available on the group’s leak page hosted on the dark web. Iliad has not yet issued a public statement confirming the breach or detailing what specific customer records were taken.
Why This Matters for You and Your Family
If your home internet, mobile phone, or landline is with Iliad or any of its brands, your contact details, billing records, or service account information may now sit in a ransomware group’s hands. Personal data from telecom providers often includes names, addresses, phone numbers, email accounts, and payment history. Once that information leaves the company’s control, it can be sold, published, or used to target you with phishing, identity theft, or physical scams. Your family’s daily connectivity suddenly becomes a vector for further compromise.
The Doxxing and Identity-Chain Implications
Telecom breaches rarely stop at one company. The leaked files can link your real name and home address to email accounts, usernames, and phone numbers. Attackers then search for those same credentials on gaming platforms, social media, and shopping sites. A single exposed Iliad record can anchor an identity chain that reveals your children’s online handles, their gaming accounts, and family relationships. This is exactly why continuous monitoring across massive breach databases matters. DoxxScan by GalaxyWarden tracks more than 13.1 billion+ breach records across over 100 platforms, uses AI-powered identity-chain mapping to connect handles to real identities, and provides hands-on remediation by specialists. It also covers your entire household, including children’s gaming accounts that often chain back to the same address and credentials.