- Orisha, a French software publisher serving thousands of businesses, detected a cybersecurity incident across several of its solutions on May 13, 2026.
- The company isolated the affected systems, filed a formal complaint with authorities, and notified impacted customers individually.
- Contact and identification data may blow open, though Orisha is holding back the full scale or the total number of victims.
A major French software publisher just confirmed that hackers targeted several of its professional solutions.
Orisha, whose software powers the daily operations of thousands of companies across France and Europe, detected the security incidents on May 13, 2026, and has since notified affected customers of the breach.
The company moved quickly after identifying the threat. Orisha isolated the compromised systems, deployed remediation measures, launched a technical investigation, and alerted the relevant authorities.
They also filed a formal complaint. The company set up a dedicated telephone hotline and a specific contact email address for affected customers seeking more information. The investigation, however, is still ongoing.
Breach Targets Software Across Multiple Sectors
Orisha does not serve a single industry. The group builds professional software for real estate agencies, retail businesses, healthcare providers, agri-food companies, service providers, and distribution networks.
Thousands of organizations across France and Europe run their daily operations on these platforms. That breadth is exactly what gives this breach its weight. When a regular company suffers a cyberattack, the damage stays mostly within that company.
When a software publisher gets hit, the impact spreads outward, touching every client’s business running the affected solutions. Orisha confirmed that the event hit several products across its portfolio. However, the firm is not telling the public the specific software solutions involved.
According to Orisha’s official communication, technical teams began containment and investigation work the moment the incidents surfaced on May 13. The company states it moved to isolate the identified systems right away to limit further exposure. Notifications to impacted customers followed shortly after.
Contact Data Potentially Exposed, Full Scale Unknown
Orisha just confirmed that some contact data was potentially blown open. The company’s communication pointed to three broad categories of affected information: identification data, contact details, and information associated with impacted users. Orisha notified each affected customer directly and individually.
The company has not yet shared the total number of people affected, the volume of records involved, or whether attackers exfiltrated data on a large scale. Those details may become clearer as the technical review progresses.
Even so, the exposure of contact data alone carries real consequences. Cybercriminals routinely weaponize stolen contact information. They send fraudulent emails impersonating trusted suppliers or service providers. They make fake phone calls. They fire off deceptive text messages.
Social engineering attacks, identity theft, and aggressive unsolicited outreach are all common follow-ons from this type of breach.
Orisha Urges Customers to Stay on High Alert
Orisha is calling on all notified customers to raise their guard. The company advises verifying the identity of anyone sending an email before engaging, approaching unexpected phone calls with skepticism, and refusing to hand over sensitive information without first confirming who is asking and why.
Checking both personal and professional accounts regularly for unusual activity is a key practice. Customers who have not received a notification should not assume they are safe. The investigation remains open, and the full picture of what leaked is not public yet.
This incident carries a broader warning for the industry. Software publishers sit at the center of entire business ecosystems. A single successful attack on one publisher can push risk outward across every company that depends on it.
The same principle applies to small and medium enterprises. Singapore firms are being warned that they could be the weakest link, leading to larger data breaches.
Orisha’s fast response shows the company is treating this as a serious event. But the real test comes when the investigation wraps up, and the company can reveal the full extent of what happened.
Any Orisha customer receiving unexpected communication by email, phone, or text message should verify the sender’s identity through official channels before sharing any information.
