1,556 candidates: data leak at École de conduite Vincent

On 4 May 2026, École de conduite Vincent — a driving school based in Ancenis-Saint-Géréon, in France's Loire-Atlantique department — was reported as the victim of a confirmed data leak affecting its learner drivers. Around 1,556 candidates (roughly 1,600) had their personal information exposed in a dataset described as very recent.

The leak is most likely tied to the school's candidate-management software, which tracks learners' registration and driving-test progress. The exposed corpus reconstructs the full enrolment and examination path of each candidate, combining identity details with operational exam-tracking data.

Exposed data categories included:

• Name and first name
• Date of birth
• Email address
• NEPH dossier number (the candidate's harmonised prefectoral registration number)
• Detailed exam-tracking data (licence category, dates, statuses, number of failed attempts)

The combination of identity data, contact details and NEPH numbers makes the leak particularly sensitive, as it enables targeted phishing and identity-theft attempts against the affected learners. The incident was logged as "Confirmed" by the breach tracker that reported it; no public statement from the school or a regulator was available at the time of reporting.