The numbers
Timeline
📢Confirming without informing
This case file illustrates a particular type of communication: the company confirms the incident through the expected channels (CNIL, complaint, statement), but the statement itself contains almost no information usable to assess individual risk. That's different from no confirmation at all — it's a confirmation empty of concrete detail, which leaves everyone uncertain about their actual exposure.
What it changes for you
If you're a customer, employee or partner of Géotec, it's currently impossible to know precisely whether your data is part of the confirmed exfiltration, or which data. As a precaution, treat any unusual solicitation claiming to come from the company with the same vigilance as a leak confirmed in full detail. See From Leak to Scam.
Frequently asked questions
Is the Géotec leak confirmed?
Yes, the exfiltration itself is confirmed by the company, with no detail on volume or data type.
What data is affected?
Not specified by Géotec at this stage.
How many people are affected?
Figure not disclosed; investigation ongoing.
Related reading
Egidio — The Threat Laboratory, "Géotec: exfiltration confirmed, almost no public detail," egidio.app/en/laboratoire/geotec-confirmed-few-details/. Licensed CC BY 4.0.
Free to reuse, including commercially, with attribution. Reuse terms.