Data leak at the Haute-Garonne departmental digital media library

On 22 May 2026, the Haute-Garonne departmental digital media library — the public online library network run by the Haute-Garonne département (operating the platform media31.mediatheques.fr) — confirmed a security incident affecting some of its users' data.

The intrusion was claimed on 9 May 2026 by a threat actor calling itself AplaGroup and confirmed by the media library around 21-22 May. According to the attackers, several vulnerabilities — some rated critical — were found in the platform and exploited to extract user-account data, extracts of which were then published. Roughly 765 people were potentially affected.

The exposed information related to library user accounts and associated administrative data, including details tied to registered users, their authorised access and library activity. Such data can enable direct identification of affected individuals and fuel targeted phishing, social engineering, identity theft and account-takeover attempts.

The breach was acknowledged by the media library, but no detailed remediation or regulatory outcome has been published, so the status remains unknown. Affected users should be wary of unsolicited messages referencing their library account and reset any credentials reused elsewhere.