220 candidates in data leak at Auto École du Lys

On 4 May 2026, Auto École du Lys — a driving school based in Dammarie-les-Lys (Seine-et-Marne, France) — was reported to be the victim of a confirmed data leak affecting its candidates. The exposed files were described as very recent, with driving-exam dates running as far as April 2026, indicating that active, current student records were involved.

The leak concerns roughly 220 candidates of the driving school. As a driving school, Auto École du Lys handles registration and exam-administration data for learners pursuing the theory test (code) and the practical driving test, which typically includes personal and identifying details required to enrol candidates for state-administered exams.

Exposed data reported for the affected candidates includes:

• Names and identifying details of driving-license candidates
• Driving-exam scheduling information (exam dates up to April 2026)
• Records tied to the school's candidate management

The disclosure follows a broader wave of pressure on the French driving-school sector in spring 2026, when the national secure-credentials agency ANTS suffered a major cyberattack disrupting candidate registration and exposing personal data of millions of users. The precise origin of the Auto École du Lys leak and the school's response were not independently confirmed at the time of reporting, so the incident status remains unknown.