Leak at Le CNAM

On 28 January 2026, Le CNAM — the Conservatoire National des Arts et Métiers, a French public higher-education and research institution — was named as the source of a leaked dataset containing personal information on roughly 10,000 individuals. The records were surfaced through the breach-tracking aggregator bonjourlafuite.eu.org.

The exposed data appears to come from a contact or member directory rather than core academic systems, combining identity, contact and profile fields. Reported categories include:

• First and last name
• Email address
• Phone number
• Job title and department
• Postal address
• Date of birth
• Website
• Hobbies / interests

The exact attack vector and how the data was obtained have not been publicly detailed, and at the time of writing no independent news coverage, official CNAM statement, or regulator (CNIL) confirmation of the incident has been identified. The combination of personal and contact data carries a real risk of phishing and identity-based fraud for the affected individuals. The overall status and the institution's response remain unconfirmed.