A trio of high-profile French and US companies have revealed separate data breaches over the past two days, highlighting a resurgence of large-scale thefts aimed at customer information and corporate contact records. Bouygues Telecom, France’s third-largest mobile operator, said an intrusion detected on 4 August allowed hackers to obtain personal data tied to 6.4 million accounts. The stolen files include contact information, contractual details, civil-status records and International Bank Account Numbers. Credit-card numbers and passwords were not compromised, the company said. Bouygues has notified France’s data-protection regulator CNIL and filed a criminal complaint. Alphabet’s Google acknowledged that attackers accessed a Salesforce customer-relationship database containing publicly available business names, contact details and notes on small and medium-sized clients. The breach has been attributed to the ShinyHunters group, which has mounted a broader campaign against Salesforce instances. Google said no sensitive user credentials were involved and no ransom demand was received. Air France-KLM separately warned that e-mails and Flying Blue loyalty-programme numbers were exposed after a third-party customer-service platform was compromised. Internal airline systems were not affected, and passport or payment data were not touched, according to the carrier, which has alerted both CNIL and the Dutch Data Protection Authority. Security researchers say ShinyHunters may escalate its extortion tactics by launching a public leak site, and they expect more victims to surface. Regulators on both sides of the Atlantic are monitoring the situation as companies review defenses around widely used cloud-based CRM tools.