Faco Paris: more than 11,000 sensitive documents, IBANs and source code exposed in a leak

On 1 May 2026, Faco Paris — a private higher education institution (Faculté libre de droit et d'économie-gestion) based in the Île-de-France region — was reported to have suffered a major data leak after a threat actor claimed to have compromised its systems and published the stolen data.

According to the leaker, the published archive weighs roughly 12 GB and contains more than 11,000 sensitive documents along with over 27,000 source code files covering the institution's platform. The actor behind the wave of attacks on French education institutions has been tracked under the handle "st0jke," with stolen datasets offered on underground data-leak forums. As of the disclosure, no official confirmation or response had been issued by Faco Paris.

The data exposed in the archive reportedly includes:

• Identity documents (ID cards, passports, diplomas)
• Bank account details (IBANs)
• Personal and student records (names, enrollment data)
• More than 1,200 photos of students and teachers
• Internal accounts and connection logs
• The complete source code of the institution's platform

The combined exposure of personal identity papers, banking details and full application source code creates significant downstream risk, including identity theft, banking fraud, credential abuse, and the discovery of further vulnerabilities in the institution's systems. The breach remained unconfirmed by the victim at the time of reporting, and no remediation details were available.