Egidio

The Threat Laboratory → YouFid

🌐 Français

Case file · August 24, 2026

YouFid: nearly 1.9 million loyalty profiles claimed

A hacker claims 1,899,454 profiles from YouFid, a French app that centralizes loyalty cards: names, emails, phone numbers, addresses, dates of birth, loyalty IDs and QR codes. Not confirmed by the company.

⚠️ Claimed, not confirmed. What's known comes from a post on a cybercriminal forum, spotted and rated "credible" by FrenchBreaches on August 24, 2026. FrenchBreaches itself states that the authenticity of the full database and the real number of unique individuals affected remain to be independently confirmed. YouFid had not, to our knowledge, publicly confirmed or denied the claim at the time of writing.

The numbers, and what backs them

1,899,454
Records claimed by the hacker, or nearly 1.9 million profiles.
Cybercriminal forum post, via FrenchBreaches.
1,000
Records published as a sample by the hacker to support the claim.
FrenchBreaches.
8
Data categories claimed: identity, contact details, date of birth, loyalty ID/QR code, registration date, first associated merchant, scan count.
FrenchBreaches.
0
Passwords or login credentials mentioned in the documented claim — only profile and loyalty data are cited.
FrenchBreaches, checked August 24, 2026.

Timeline

CLAIMED
August 24, 2026
A post on a cybercriminal forum claims 1,899,454 YouFid profiles, with a sample of 1,000 records published. FrenchBreaches spots and documents the claim, rating it "credible" while stressing the lack of independent confirmation of the actual scale.

🎫Why a "loyalty" leak isn't trivial

A loyalty profile combines full identity, contact details, and postal address with a record of purchasing behavior (which retailer, since when, how many scans). This combination — verifiable identity plus precise habits — is exactly what makes a phishing message credible: a scammer who knows where you're a customer and since when can craft a far more convincing message than a generic email.

What this means for you

If you use YouFid, be alert to any message posing as the app or one of its partner retailers that asks for personal information, payment, or an urgent click — especially if it references precise details about your account to appear legitimate. See also our case file From leak to scam.

🔒 No password is mentioned in this claim — there's no reason to change a YouFid password at this stage. The vigilance here is about incoming messages, not your credentials.

Frequently asked questions

Is the YouFid breach confirmed?

No. FrenchBreaches explicitly states there is no official confirmation from YouFid at the time of writing.

Did any passwords leak?

Not mentioned in the documented claim — only profile and loyalty data are cited.

What is YouFid?

A French app that centralizes loyalty cards from multiple retail chains.

📌 Last checked: August 24, 2026. Verifiable information to report: contact@egidio.app.

Related reading

Klark.ai: up to 500,000 people potentially exposed Axess: claimed plaintext password breach From leak to scam All our sources
Cite this page Egidio — The Threat Laboratory, "YouFid: nearly 1.9 million loyalty profiles claimed," egidio.app/en/laboratoire/youfid-loyalty-program-breach/. Licensed CC BY 4.0.

Free to reuse, including commercially, with attribution. Reuse terms.