Académie de Nice: personal data of teachers and staff leaked

On 8 April 2026, the Académie de Nice — the regional authority of France's Ministry of National Education covering the south-east of mainland France — was reported to be the subject of a data leak, with a database linked to the academy circulating online and being distributed on cybercriminal forums.

The exposed dataset, structured in JSON-formatted files, contained close to 19,000 records relating to teachers and administrative agents. Beyond basic identity details, the records combined administrative and operational information that allowed near-complete staff profiles to be reconstructed.

Exposed data categories reportedly included:

• Full names (first and last)
• Professional email addresses
• Administrative information (job functions, assignments, institutional affiliations)
• Direct contact details
• Operational data such as schedules and workplace locations

The combination of roles, assignments and workplace details makes this data particularly useful for targeted attacks, notably social engineering and phishing that impersonates internal Education Nationale communications. No specific threat actor claimed responsibility, and at the time of reporting the database was still being distributed online; no official remediation statement specific to this leak had been published.