Action Populaire: data linked to La France Insoumise activists leaked

On 7 May 2026, Action Populaire — the community and organizing platform used by France's left-wing party La France Insoumise (LFI) to coordinate local groups, events and activist exchanges — was hit by a data breach claimed by a hacker operating under the alias fuzzeddffmepg. The attacker advertised the stolen dataset on a hacking forum and threatened to release further material, including email servers.

The threat actor said they exploited a flaw in what they described as the platform's obsolete infrastructure. The claimed dataset reportedly spans nearly nine years of activity, from 2017 to 2026, and exposes the political affiliations and engagement of LFI supporters rather than ordinary commercial data — a particularly sensitive category.

The data the attacker claims to have exfiltrated includes:

• Approximately 120,000 unique email addresses
• Approximately 20,000 phone numbers
• Names and surnames
• Group membership and event-participation records
• Private messages and internal communications
• Payment, subscription and associated personal-address data

La France Insoumise did not publicly confirm the incident at the time of reporting. ANSSI, France's national cybersecurity agency, transmitted a report to the Paris public prosecutor concerning the hacking of LFI and Action Populaire, and an investigation is underway. Security observers warned that the exposed information could fuel targeted political phishing, identity theft and reuse in further malicious campaigns. The full authenticity and scope of the leak remained unverified as the matter developed.