Important information

Biocorp has identified a security incident that affected its corporate website (biocorpsys.com) between August 22 and 24, 2026.

Some data transmitted via the contact form may have been accessed by an unauthorised third party. To learn more about the incident, its potential consequences and the measures taken, please click here.

Biocorp’s corporate website was hacked on August 22, 2026. The incident – which exploited a recent Wordpress vulnerability – was detected on August 24 at 10:22 a.m., and resolved the same day, at 2:55 p.m.

During this time, a hacker set up a fake ReCaptcha inviting Internet Biocorpsys website users to type a PowerShell command, on Windows. This command could have allowed the hacker to take control of the computer of any user who followed these instructions in full.

In addition, during these two days, the hacker was able to access the data transmitted by users through the contact form. In addition to the identity and contact details of the authors of the messages, they were able to read their content.

The risk of identity theft exists, but remains low given the data collected through the form and the inability to attach files to the contact form.

The impact therefore seems to be mainly a loss of confidentiality. It is limited to the data that you have voluntarily transmitted to Biocorp through the website.

In order to prevent this type of incident in the future, we have taken the following measures:

Urgent deployment of necessary updates and security patches;
Implementation of two-factor authentication for administrator accounts;
Setting up an application firewall;
Migration to a hosting and maintenance solution directly administered by our IT department.

We remind you that neither Biocorp nor any other companies within the group will ever ask you to provide them by email, SMS or telephone, sensitive data, such as your bank details.

If you visited the Biocorp corporate website between August 22 and 24, we invite you to contact your IT department or a trusted individual with technical IT knowledge, to make sure that the hacker has not taken control of your computer. If necessary, we invite you to renew all your passwords.

The French Data Protection Authority, the Commission Nationale de l’Informatique et des Libertés (CNIL) was informed of the situation on August 27, 2026. Biocorp will file a complaint, so that an investigation and criminal prosecution can be initiated by the Public Prosecutor, if necessary.

We kindly ask you to accept our apologies for the inconvenience of this incident. Our teamsremain at your disposal to provide you with any further information. You can contact Biocorp at the following coordinates: privacy@biocorp.fr or Biocorp Production, ZI de Lavaur, La Béchade, 63500 Issoire, France.