Amundi data breach history (2016-2026): no confirmed breach, but scams use its name
Amundi is Europe’s largest asset manager, majority-owned by Crédit Agricole. This page records what we could find on cybersecurity incidents involving Amundi from November 2016 to November 2026, in English and French sources.
Short answer
Was Amundi hacked?
We found no confirmed breach of Amundi’s own systems from 2016 to 2026 in the sources we read. We also found no vendor incident, ransomware leak-site claim, CNIL sanction or US state breach notice naming Amundi or its former US arm.
What Amundi does warn about is fraud: criminals use its name, logo, approval number and the names of its staff to sell fake investments. Amundi says it never contacts the public directly to sell products. That is impersonation, not a breach of Amundi’s data.
Timeline at a glance
2016-2026No confirmed breach of Amundi systems found in English or French sources. (PlayCISO review)Not a breach
OngoingAmundi warns of fake investment offers using its name, logo and staff names. (Amundi)Not a breach
Last updated November 13, 2026. Every entry is dated and linked to its source; claims by attackers are labelled as claims, never stated as fact.
Amundi incident timeline, in detail
Confirmed = acknowledged by Amundi, a regulator filing or a court. Reported = credible reporting Amundi has not fully confirmed. Unverified claim = an attacker or leak-site claim.
OngoingNot a breachBrand impersonation / fraud
Investment scams impersonate Amundi and its employees
What happened. Amundi’s scam-attempts page says fraudsters use the name, address, logo or approval number of authorised firms and the names of their employees, including Amundi staff, to offer investments. Amundi says it and its subsidiaries never approach the public directly; its products are sold through intermediaries.
Impact. No Amundi data is described as stolen. The harm is to people who send money to fake “Amundi” contacts.
For a firm that sells mainly through banks and advisers, the visible risk is criminals borrowing its name. Retail investors rarely deal with Amundi directly, which is exactly what scammers exploit.
Absence of evidence is not evidence of absence
European firms notify regulators (CNIL, AMF) rather than publish breach letters, and not every notification becomes public. A clean public record means nothing was disclosed.
What it means for Amundi clients — and what to do
If you invest in Amundi funds through a bank, employer savings plan or adviser, the realistic risk is someone pretending to be Amundi, not a leak of your account.
1.Ignore unsolicited “Amundi” offers
Amundi says it does not contact the public directly to sell products. Check any offer with your bank or adviser and the AMF’s blacklist.
2.Protect your savings-plan sign-in
Use a unique password and the strongest sign-in option on your employee savings or bank portal.
Company statements and regulator filings first, then reputable reporting. Reviewed November 13, 2026.
1.Scam attempts — Amundi, undated (read 13 Nov 2026)
Frequently asked questions
Was Amundi hacked?+
We found no confirmed breach of Amundi’s own systems from 2016 to 2026 in the English and French sources we read, and no ransomware leak-site claim naming it.
Has Amundi had a data breach?+
None that we could find in public records, news or regulator decisions. Amundi does warn that scammers impersonate it and its employees.
Has Amundi been fined for a data or cyber failure?+
We found no CNIL, AMF or other regulator penalty against Amundi for a cybersecurity or data protection failure in the sources we read.
Someone from “Amundi” called me with an investment offer. Is it real?+
Very likely not. Amundi says it and its subsidiaries never contact the public directly to sell products. Check with your bank or adviser and the AMF’s list of unauthorised firms.
More in the Breach Index
Same sourced, verification-tagged timeline, company by company — compare how peers have fared.
Independent analysis for security-leadership education; not affiliated with or endorsed by Amundi. Facts are attributed to the dated sources above, and anything disputed or unconfirmed is labelled as such. See the full Breach Index.