Leak at JVS

On 26 November 2024, JVS (JVS-Mairistem) — a leading French publisher of management software for municipalities and local authorities — was named in connection with a leaked dataset of user-account records belonging to its public-sector users.

The data appeared in the French breach tracker bonjourlafuite, which catalogues leaks circulated on hacking forums and Telegram channels. The exposed records concerned individual accounts of staff at French local authorities that use JVS software, rather than the general public.

Exposed data categories reportedly included:

• Last name and first name
• Email address
• Account login
• Phone number
• The associated local authority (collectivité)

The precise origin and exact number of affected records could not be independently confirmed, and no detailed public statement, regulator filing or news coverage tying this specific 26 November 2024 disclosure to a confirmed intrusion was identified. The status of any investigation or remediation is unknown.