Threat watch / Breach
Monceau Fleurs: customer data of four Emova florist brands taken through a checkout software supplier
Emova Group, owner of the Monceau Fleurs, Au Nom de la Rose, Happy and Cœur de Fleurs florist chains, told customers by email that the provider of its checkout management software was hit by a cyberattack on October 30, 2026, and that the attacker was able to extract customer data. Emova speaks of a "nombre limité" (limited number) of customers, says bank data is not included and notified the CNIL on November 6. The supplier is not named.
- Sector
- Retail
- Way in
- Supplier
- Product or vendor
- None named
- How it happened
- Through the unnamed provider of Emova's checkout management software, hit by a cyberattack on October 30. The provider disabled the attacker's accounts, blocked vulnerable features, isolated a compromised server and migrated the application and database. How the attacker got into the provider is not stated.[1] Checked 12 Nov 2026
- What was stolen
- Title, last and first name, date of birth, postal address, landline and mobile numbers, email address, company name for business customers, loyalty card number and type, and communication preferences. Emova says the attacker "a pu les extraire" (was able to extract them) and that bank data is not included.[1][2] Checked 12 Nov 2026
- Who was impacted
- A "limited number" of customers of Monceau Fleurs, Au Nom de la Rose, Happy and Cœur de Fleurs, including business customers. No figure is given.[1][2] Checked 12 Nov 2026
- Threat actor
- Not attributed