Credit Saison: Saison Smart Real Estate Investment contractor platform intrusion

1. 2026-10-29

   From 03:42 to 06:17 a third party accessed the contractor's system without authorization, exploiting a flaw in an authentication mechanism reachable from outside. The contractor reported to Credit Saison the same day, cut off the route and changed the credentials. At 22:00 the member platform was shut down as a precaution. [1]

2. 2026-10-31

   Credit Saison disclosed the leak. [1]

Data of 1,889 people leaked: for 39, some of name, email address, address, date of birth, phone number, nationality, dividend bank account details, investor suitability data and units bought; for the other 1,850, name and units bought. The member platform holds no card data. No changes to holding records and no transfers of assets on the blockchain have been found. The contractor has not been named. [1]

The platform will restart only after its safety is confirmed, in agreement with the companies involved. Affected people are being contacted, and the company warns about emails, text messages and calls posing as it. [1]