Illicado confirmed on 6 November that a cyberattack had affected 15,000 digital gift cards. The cards concerned have been deactivated and replaced, the company says. For employees who had received them, the immediate issue is finding the remaining balance on a new card; for the companies that ordered them, it is also a matter of following the consequences of the documents being copied.
The attack took place on 1 November. According to statements by Illicado to AFP, reported by MoneyVox, it concerns e-gift cards bought in 2025 and 2026 whose credit had not been spent in full. The figure announced refers to cards, and does not establish an equivalent number of people or companies.
The PDF creation service targeted
The intruders obtained copies of digital documents through the service that generates PDFs for e-gift cards. The company describes the attack as targeted and automated. The clients concerned had bought these vouchers to distribute to their employees.
The notification reported by Cyberattaque.org on 5 November describes a detection followed by blocking measures. It relates in particular to business orders and refers to a breach of personal data security. The outlet consulted a letter addressed to a company: the number of cards mentioned in that letter relates to that particular client, not to the incident as a whole.
The exact technique used has not been detailed publicly in these accounts. The retrieval of PDFs is documented; attributing the attack to a particular vulnerability, a stolen password or specific malware would go beyond the information available.
Why a copied card can cause a problem
A gift-card PDF is not always just a receipt to be filed away. When it contains the details needed to use the credit, a copy can provide access to an economic benefit. The risk therefore depends not only on keeping the beneficiary’s name confidential, but also on whether the reproduced details remain valid.
This explains why it makes sense to deactivate an old voucher and issue a new one. Deleting the document from your computer is not enough to make a copy held elsewhere unusable. Conversely, replacing a card cannot retrieve information that may already have been copied: tracking the balance and tracking the data are two separate matters.
Balances restored, according to Illicado
Illicado says it sent beneficiaries new e-gift cards showing the amount remaining at the time of the incident, with no action required and no financial loss to cardholders. The company told AFP that no payments had been made using the cards concerned at that point.
This statement describes the position communicated by Illicado on 6 November. It is not an independent audit of all transactions. The total value of the affected balances was not disclosed to the agency.
For a recipient, the useful checks are whether the new voucher has arrived and whether the amount is correct. If it is missing or the balance is wrong, contact the issuer through its usual channel, keeping the original proof of purchase and the replacement message. There is no need to post a photograph of your card or its codes on social media to ask for help.
Check replacement messages
An announcement about reissuing cards can also be used as a pretext for an attempt at fraud. Nothing cited here establishes that a phishing campaign is connected to this incident; the following precautions are for prevention.
Cybermalveillance.gouv.fr recommends contacting the organisation directly when a message raises doubts, rather than following its link. A request for a password, bank details or payment presented as essential to replacing a card should prompt you to check directly with the organisation.
If you have already sent bank details to a suspicious contact, the public service advises contacting your bank immediately and keeping the evidence. Simply having an Illicado card does not, in itself, justify cancelling a personal bank card.
Illicado says it notified the CNIL of the data breach. Further investigation will need to clarify the scope of the documents involved and the consequences. For cardholders, the priority remains practical: having the right voucher, the right balance and an authenticated point of contact.
Illustrative photo: a gift-card display and a warning about fraud in a Target store. These are not Illicado cards. Mike Mozart / Wikimedia Commons / CC BY 2.0.
