Leak at the French Ministry of Agriculture and Food

On 28 December 2025, the French Ministry of Agriculture and Food — the government department overseeing agriculture, agri-food and food sovereignty — became the target of a data-leak claim posted to the BreachForums marketplace by a threat group operating under the name LAPSUS$ Group. The actors published roughly 60 GB of data they said was extracted from the ministry's internal systems and warned that it was "just the start" of further attacks against France.

According to the leak post, the stolen archive contained 97,210 files organized across about 1,250 folders. Rather than a single customer database, the dump pointed to deep access into the ministry's infrastructure: FTP server credentials and file listings, SQL database exports, and system/connection logs covering 32 French departments and 19 business (métier) applications, alongside an internal synchronization tool.

Categories of data referenced in the leak include:

• FTP access credentials and server file listings
• SQL database files (exports)
• System and connection logs across 32 departments
• Internal references to 19 business applications

The exposure raised concerns over strategic information on national food production, the personal data of ministry staff and agricultural partners, and the operational integrity of departmental applications. The leak was attributed to LAPSUS$ Group; as of reporting, the ministry had not issued a detailed public confirmation tying an official statement to this specific dataset, and the full impact remained under assessment.