Actradis: 82,000 business customers and 222,000 internal tracking records leaked

On 3 May 2026, Actradis — a French platform used by businesses to manage, store and distribute administrative and regulatory-compliance documents — was named as the source of a large data leak. A threat actor using the alias Lagui published a database attributed to the company, claiming it had been extracted only a few days before being posted online.

The leaked dataset was split across two files: a clients_all file with 82,611 client records and a suivi_all ("tracking") file with 222,473 internal follow-up entries, for an estimated total of around 305,000 records. The data appeared to originate from internal interfaces tied to the Actradis back office. The exact intrusion method was not disclosed.

The exposed information related primarily to French companies and their compliance files, including:

• Company names, SIREN numbers and VAT identifiers
• Postal addresses and billing references
• Subscription and supplier-relationship details
• Internal commercial notes
• References to compliance documents (corporate registration certificates, tax attestations, insurance documents)

As of reporting, no official confirmation had been published regarding the full authenticity of the data or the exact origin of the breach. Lagui is a threat actor previously linked to other publicized French leaks (e.g. La Redoute, Easy Cash), and the status of any company or regulator response remains unknown.