Leak at justice.fr

On 22 December 2025, a database attributed to the French justice system (justice.fr) — the public-facing portal of France's Ministry of Justice — was published online, exposing the personal and professional details of more than 1,100 justice professionals, including magistrates, judges, lawyers, judicial staff and administrative agents. The disclosure was flagged publicly by breach researcher seblatombe, who described it as a highly sensitive leak targeting key actors of the French judicial system.

The dataset is consistent with — and almost certainly a recirculation of — the file leaked in July 2023 by the hacktivist group Kromsec, which contained the records of 1,121 magistrates and lawyers and was published on Telegram in the aftermath of the Nahel affair. At the time, the Ministry of Justice stated the data was "old," did not originate from its own servers and was unrelated to the justice.fr infrastructure; Kromsec claimed it had been obtained via a flaw in a Drupal-based website. As such, this appears to be a data exposure / re-leak of a previously compromised dataset rather than a fresh intrusion into ministry systems.

Exposed data categories include:

• Full identity (last name, first name)
• Judicial function and role
• Personal and professional addresses
• Personal and professional phone numbers and email addresses
• Professional information (court, jurisdiction, organisation)
• Banking details (bank, IBAN, BIC)

Because the file combines home addresses, contact details and banking information for serving members of the judiciary, the principal risks flagged are banking fraud, highly targeted phishing, and physical-safety threats against judges and magistrates. The origin and authenticity of the December 2025 republication were not independently confirmed by the Ministry of Justice, and the incident status remains unknown.