1,462,485 beneficiaries affected by the Banque Alimentaire data leak

On 4 March 2026, the Fédération française des Banques Alimentaires (FFBA) — the national network of French food banks that distributes food aid to people in need — confirmed a cyberattack that exposed the personal data of beneficiaries enrolled in its aid programmes.

The compromised file affected 659,658 families, amounting to roughly 1,462,485 individuals, and is reported to span records collected over the 2012-2026 period. Because the data concerns people receiving food assistance, the exposure is especially sensitive, revealing both identity and indicators of social and financial precarity.

The exposed data reportedly included:

• First name, surname, sex and date of birth
• Postal address, email address and telephone number
• Family situation and household composition
• Income and other financial-eligibility details
• History of food aid received

The FFBA notified the CNIL (France's data protection authority) and a complaint was filed. As a network of food-aid associations, the breach exposes a vulnerable population to heightened risks of phishing, social-engineering and fraud, and affected beneficiaries have been advised to remain vigilant about unsolicited contact.