Leak at Lilagora (via AlumnForce)

On 10 April 2026, Lilagora — the alumni and professional network of the University of Lille, with more than 22,000 members — was exposed in a data breach of its third-party platform provider, AlumnForce. AlumnForce is a French software vendor that operates turnkey alumni networks for universities and grandes écoles, and the compromise of its platform spilled over to the institutions it serves, making this a supply-chain incident rather than a direct breach of Lilagora itself.

The wider AlumnForce incident, reported in early April 2026, exposed roughly 2.7 million user profiles spanning 49 French institutions — including Sciences Po, HEC Paris, École Polytechnique and several universities such as Strasbourg, Bordeaux, Lille and Pau. A threat actor put the consolidated database up for sale, and the data reportedly included over 1.83 million unique email addresses and more than 651,000 phone numbers.

Data exposed for affected members included:

• First and last name
• Email address and phone number
• Postal code and city
• Current job title and employer
• Career aspirations and desired salary range
• Professional experience and career path within the network
• Degree obtained and graduation year
• Skills

As of disclosure, the data was being offered for sale by the attacker and the incident remained ongoing. Several affected institutions issued notices to their members, and the leak — exposing detailed professional profiles of students, graduates, staff and researchers — drew significant attention in France.