Adele.org: leak of 261,000 student housing files with ID cards and passports

On 25 April 2026, Adele.org — a French online platform that lets students apply for accommodation in residence halls and managed housing — was named as the victim of a major data leak. A threat actor operating under the alias ChimeraZ claimed to have compromised the platform's database and published roughly 261,000 student housing application files, totalling around 560 MB.

The attack vector was not disclosed; ChimeraZ simply released the dataset publicly, framing it as a full database dump. The actor was active against several French education and training organisations during this period, posting multiple French data leaks within a short window.

The files reportedly contained an unusually sensitive mix of identity and financial documents, including:

• Scanned national ID cards, passports and residence permits
• Health-insurance (carte Vitale) cards
• Bank account details (RIB/IBAN) and proof of income
• Proof of residence, tax notices and utility bills
• Names, postal addresses, phone numbers and email addresses
• Guarantor information tied to each rental application

Because the records combine government identity documents with banking and household data — and reportedly include minors — the exposure carries a high risk of identity theft, fraudulent rental or account openings, and targeted phishing against students and their guarantors. At the time of reporting, no official confirmation of the breach or of the full authenticity of the leaked data had been published by Adele.org, leaving the status unverified.