iliad.fr Listed by ALP-001 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

The French telecommunications company iliad.fr appeared on a leak site maintained by the ransomware group ALP-001 on March 30, 2026. The listing states that internal files were exfiltrated in a ransomware attack, while the number of individuals affected and the precise contents of the material remain undisclosed. The incident matters because iliad.fr supplies broadband, telephony and related services to a large customer base in France. Any confirmed exfiltration of internal records from such an operator could involve operational systems or customer-linked information whose misuse would extend beyond the company itself.

Inside the incident

Public information is limited to the March 30 listing. No independent confirmation of the intrusion method, timeline of access, or volume of data has been released. The entry notes that samples can be downloaded from the group’s leak page and records a deadline of April 11, 2026. The number of people affected is listed as unknown.

The group behind it: ALP-001

ALP-001 is a ransomware operator that publishes victim names and sample files on a dedicated leak site when ransom demands are not met. The group claims responsibility for the iliad.fr listing, as it does for other entries on the same platform. Further details of its infrastructure or prior operations are not addressed in the current record.

Who is iliad.fr?

Iliad is a French company founded in 1999 and headquartered in Paris. It operates in the broadband, traditional telephony and retail telecom segments, generating reported revenue of $11.7 billion. As a provider of internet access and telecommunication services, it maintains extensive customer account, billing and network-management records.

What was likely exposed

The listing refers only to “internal files exfiltrated in ransomware attack.” No inventory of specific data categories has been published. Organisations of this type routinely hold customer identifiers, service credentials, billing histories and internal operational documents, yet the exact composition of the claimed exfiltration remains unconfirmed.

• Internal files referenced in the listing
• Samples stated to be available on the leak page
• Scale and categories of data not disclosed

What's at stake

For individuals, exposure of account or network-related records could enable targeted account takeovers or further social-engineering attempts. For the organisation, the incident adds operational disruption and the possibility of regulatory scrutiny under French and European data-protection rules. Both outcomes depend on the still-unverified scope of the material.

Were you affected?

Begin by changing passwords for any iliad.fr-linked accounts and enabling multi-factor authentication where available. Monitor bank and service statements for unusual activity. Readers may also run a free exposure scan of their email address against known breach data sets to check for prior appearances of their information.

AICompiled with AI assistance from public sources and published under our editorial standards.