Leak at Commune de Bourg-Achard

On 11 February 2026, the Commune de Bourg-Achard — a town hall serving a small municipality in the Eure department of Normandy, France — informed residents of a cyberattack, dating back to 29 January 2026, that had resulted in a leak of municipal data.

According to the town hall's public notice, its IT provider intervened immediately to harden the systems already in place, and some data remained temporarily unavailable during recovery. The municipality reported the incident to the CNIL (the French data-protection authority) and to the competent authorities, including the specialised gendarmerie and ANSSI / Normandie Cyber.

Among the information identified as concerned were the files relating to bookings of the various municipal halls. Exposed data categories included:

• Municipal room / hall reservation records
• Associated personal contact details of residents who had booked municipal facilities

As a precaution, the commune urged residents to remain vigilant against fraudulent phone calls, text messages or emails, and not to share any personal or banking information by phone or email. The leak was confirmed and listed publicly by the breach-tracking project bonjourlafuite.eu.org; no perpetrator, ransom demand or precise record count has been publicly established.