More than 46 million Deezer users had data exposed after a processor, Mobius Solutions, failed to delete data following contract termination, leading to a CNIL fine.

Key facts

• Affected over 46.9 million users.
• Caused by a third-party processor retaining data it should have deleted.
• Resulted in a 1 million euro CNIL fine.
• A clear example of third-party data-handling failure.

The lesson

Deezer shows that data you hand to processors remains your responsibility. Contractual deletion must be verified, not assumed.

How DarkThreatX helps

DarkThreatX monitors the dark web for breached records, leaked credentials and threat-actor activity tied to your organisation. Run a free dark web scan or explore the platform.