What Happened
In October 2024, the French online driving school Ornikar suffered a data breach affecting approximately 2.5 million customers, with hackers claiming access to over 4 million records. The breach exposed personally identifiable information including names, first names, email addresses, phone numbers, dates of birth, and postal addresses, though the company confirmed that sensitive financial data and passwords were not compromised. The company notified affected individuals and the French data protection authority (CNIL), while implementing enhanced security protocols to prevent future incidents. Stolen customer data was subsequently offered for sale on underground forums.
