Leak at the City of Paris

On 6 February 2026, the City of Paris — the municipal government of the French capital — was reported to have suffered a data breach affecting its adult-education service. A file drawn from the platform of the Cours municipaux pour adultes (Paris municipal adult classes) was circulated online, exposing the personal details of users who had registered before May 2025.

The City confirmed it had been the target of a security incident that led to the unauthorised distribution of the file. The exact intrusion method was not publicly disclosed; officials described it as a "security attack" and said technical teams were still working to determine the precise origin. The municipality stressed that no passwords or banking information were involved.

According to the leaked dataset, 320,292 people were affected. The exposed data categories were:

• First and last name
• Date of birth
• Postal address
• Phone number
• Email address

Although no financial data was compromised, the combination of identity and contact details exposes those affected to a heightened risk of phishing and identity theft. The City of Paris filed a criminal complaint, notified the French data protection authority (CNIL), advised users to be wary of suspicious messages, and set up support via its 3975 helpline. Investigations into the incident were ongoing at the time of disclosure.