60,000 staff exposed in a claimed data leak at Annuaire Administration
On 17 March 2026, the actor HexDex claimed on DarkForums a leak from the French Annuaire de l'administration, a centralized public-sector directory, exposing the names, phone numbers, professional and personal addresses, and job titles of roughly 60,000 government agents.
- Victim
- Annuaire Administration
- records
- 60.0K
On 17 March 2026, Annuaire Administration — a centralized directory listing contact details for French public-sector staff — was named in a data-leak claim published by the threat actor HexDex on the DarkForums marketplace. The announced corpus covered roughly 60,000 government agents drawn from across the French administration.
According to reporting, the dataset put up for sale aggregated identifying and contact information spanning multiple ministries and agencies — including Justice, Interior, Foreign Affairs, Defense, civil aviation, and public finances. The exposed fields reportedly included:
- Full names of public-sector agents
- Phone numbers
- Professional and, in some cases, personal postal addresses
- Job titles and assigned services
The incident was one of roughly a hundred breaches attributed to HexDex, a prolific actor who from late 2025 onward targeted French sports federations, unions, education and police platforms, and government directories. On 20 April 2026, French cybercrime investigators (BL2C) arrested a 21-year-old suspect in Vendée, seized his equipment and his DarkForums account, and placed him in custody, effectively halting the campaign. The full scope and downstream misuse of the leaked directory remain under investigation.
Sources
- fuitesinfos.frhttps://fuitesinfos.fr/article/2026-03-17-annuaire-administration
- zataz.comhttps://www.zataz.com/angel-batista-et-hexdex-le-piege-se-referme/
- solutions-numeriques.comhttps://www.solutions-numeriques.com/cyberattaques-le-hacker-surnomme-hexdex-est-place-en-garde-a-vue/