Loxam Reports Data Breach via Third-Party Software, Investigation Underway
Loxam, a leading global equipment rental company, disclosed a data breach last Wednesday (4 February) involving potential theft of customer data through a third-party software system used for planning equipment deliveries. The company, which serves the construction and power sectors, confirmed that the incident has been contained and no longer poses an active threat.
An investigation is currently underway in collaboration with the affected software provider a major industry player and independent cybersecurity experts. Loxam stated that preliminary findings suggest the stolen data is unlikely to harm its clients. The breach will be reported to relevant authorities, though the company emphasized that normal operations remain unaffected.
It remains unclear whether the incident impacted only Loxam’s French operations or extended to its international subsidiaries. The company has not disclosed further details on the scope of the breach or the specific third-party vendor involved.
Source: https://www.internationalrentalnews.com/news/loxam-reports-data-breach/8113399.article
PPi Software and Services cybersecurity rating report: https://www.rankiteo.com/company/ppi-software-and-services
"id": "PPI1770638613",
"linkid": "ppi-software-and-services",
"type": "Breach",
"date": "2/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Equipment Rental, Construction, Power '
'Sectors',
'location': 'France (potentially international '
'subsidiaries)',
'name': 'Loxam',
'type': 'Company'}],
'attack_vector': 'Third-party software',
'data_breach': {'data_exfiltration': 'Potential theft of customer data',
'type_of_data_compromised': 'Customer data'},
'date_detected': '2025-02-04',
'date_publicly_disclosed': '2025-02-04',
'description': 'Loxam, a leading global equipment rental company, disclosed a '
'data breach involving potential theft of customer data '
'through a third-party software system used for planning '
'equipment deliveries. The incident has been contained and no '
'longer poses an active threat.',
'impact': {'data_compromised': 'Customer data',
'operational_impact': 'Normal operations remain unaffected',
'systems_affected': 'Third-party software system for planning '
'equipment deliveries'},
'investigation_status': 'Underway',
'references': [{'date_accessed': '2025-02-04', 'source': 'Loxam Disclosure'}],
'regulatory_compliance': {'regulatory_notifications': 'Will be reported to '
'relevant authorities'},
'response': {'containment_measures': 'Incident contained, no longer poses an '
'active threat',
'third_party_assistance': 'Independent cybersecurity experts, '
'affected software provider'},
'title': 'Loxam Data Breach via Third-Party Software',
'type': 'Data Breach'}