Leak at ENSAI Network (via AlumnForce)

On 10 April 2026, ENSAI Network — the alumni community of France's École Nationale de la Statistique et de l'Analyse de l'Information (ENSAI) — was named among the institutions caught up in a large-scale breach of AlumnForce, the third-party platform that powers its online alumni network. The exposure did not stem from ENSAI's own systems but from a compromise of its software provider, making this a supply-chain incident.

In early April 2026, a threat actor advertised for sale a database of roughly 2.7 million student and graduate profiles drawn from 49 French universities and grandes écoles that use AlumnForce, with records spanning decades of graduating classes. The dataset was reported to contain more than 1.83 million unique email addresses and over 651,000 phone numbers. ENSAI Network appears among the affected alumni networks.

Exposed data categories include:

• First and last name
• Email address and phone number
• Postal code and city
• Current job title and employer
• Career aspirations and desired salary range
• Professional experience and path within the alumni network
• Degree obtained and graduation year
• Skills

As of disclosure, the compromised database was being offered for sale on cybercriminal forums and several affected institutions had confirmed the leak, so the incident is treated as ongoing. Alumni listed on AlumnForce-powered networks are advised to be alert to targeted phishing and identity-fraud attempts using the leaked contact and career details.