Important information

Biocorp has identified a security incident that affected its corporate website (biocorpsys.com) between August 22 and 24, 2026.

Some data transmitted via the contact form may have been accessed by an unauthorised third party. To learn more about the incident, its potential consequences and the measures taken, please click here.

Biocorp’s corporate website was hacked on August 22, 2026. The incident – which exploited a recent Wordpress vulnerability – was detected on August 24 at 10:22 a.m., and resolved the same day, at 2:55 p.m.

During this time, a hacker set up a fake ReCaptcha inviting Internet Biocorpsys website users to type a PowerShell command, on Windows. This command could have allowed the hacker to take control of the computer of any user who followed these instructions in full.

In addition, during these two days, the hacker was able to access the data transmitted by users through the contact form. In addition to the identity and contact details of the authors of the messages, they were able to read their content.

The risk of identity theft exists, but remains low given the data collected through the form and the inability to attach files to the contact form.


The impact therefore seems to be mainly a loss of confidentiality. It is limited to the data that you have voluntarily transmitted to Biocorp through the website.

In order to prevent this type of incident in the future, we have taken the following measures:

  • Urgent deployment of necessary updates and security patches;
  • Implementation of two-factor authentication for administrator accounts;
  • Setting up an application firewall;
  • Migration to a hosting and maintenance solution directly administered by our IT department.

We remind you that neither Biocorp nor any other companies within the group will ever ask you to provide them by email, SMS or telephone, sensitive data, such as your bank details.

If you visited the Biocorp corporate website between August 22 and 24, we invite you to contact your IT department or a trusted individual with technical IT knowledge, to make sure that the hacker has not taken control of your computer. If necessary, we invite you to renew all your passwords.

The French Data Protection Authority, the Commission Nationale de l’Informatique et des Libertés (CNIL) was informed of the situation on August 27, 2026. Biocorp will file a complaint, so that an investigation and criminal prosecution can be initiated by the Public Prosecutor, if necessary.

We kindly ask you to accept our apologies for the inconvenience of this incident. Our teamsremain at your disposal to provide you with any further information. You can contact Biocorp at the following coordinates: privacy@biocorp.fr or Biocorp Production, ZI de Lavaur, La Béchade, 63500 Issoire, France.

Privacy Policy

Who are we?

Texte suggéré : L’adresse de notre site est : https://biocorpsys.com.

Comments

Suggested content: When you leave a comment on our website, the data entered in the comment form, as well as your IP address and your browser’s user agent, are collected to help us detect unwanted comments.

An anonymised string created from your email address (also called a hash) may be sent to the Gravatar service to check whether you are using it. The Gravatar service’s privacy policy is available here: https://automattic.com/privacy/. Once your comment has been approved, your profile picture will be publicly visible next to your comment.

Media

Suggested content: If you upload images to the website, we advise you to avoid uploading images containing EXIF GPS coordinates. Visitors to your website can download and extract location data from these images.

Cookies

Suggested content: If you leave a comment on our website, you will be asked to save your name, email address and website in cookies. This is solely for your convenience, so that you do not have to enter this information again if you leave another comment later. These cookies expire after one year.

If you go to the login page, a temporary cookie will be created to determine whether your browser accepts cookies. It does not contain any personal data and will be deleted automatically when you close your browser.

When you log in, we will set up a number of cookies to record your login information and screen preferences. The lifetime of a login cookie is two days, and that of a screen option cookie is one year. If you tick “Remember me”, your login cookie will be stored for two weeks. If you log out of your account, the login cookie will be deleted.

When you edit or publish a post, an additional cookie will be stored in your browser. This cookie does not contain any personal data. It simply indicates the ID of the post you have just edited. It expires after one day.

Embedded content from other sites

Suggested content: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other sites behaves in the same way as if the visitor were visiting that other site.

These websites may collect data about you, use cookies, embed third-party tracking tools, and track your interactions with these embedded contents if you have an account logged in on their website.

Use and transmission of your personal data

Suggested content: If you request a password reset, your IP address will be included in the reset email.

How long we keep your data

Suggested content: If you leave a comment, the comment and its metadata are retained indefinitely. This allows subsequent comments to be automatically recognised and approved instead of being held in the moderation queue.

For accounts that register on our site (if applicable), we also store the personal data indicated in their profile. All accounts can view, modify or delete their personal information at any time (except for their username). Site administrators can also view and modify this information.

Your rights regarding your data

Suggested content: If you have an account or have left comments on the website, you can request to receive a file containing all the personal data we hold about you, including data you have provided to us. You can also request the deletion of your personal data. This does not include data stored for administrative, legal or security purposes.

Where your data is sent

Suggested content: Visitor comments may be checked through an automated spam detection service.