176,317 staff exposed: data leak at the French Ministry of the Interior (E-campus)

On 25 March 2026, the French Ministry of the Interior (E-campus) — the online training platform used by the French National Police (Police nationale) — disclosed a data breach after an unauthorized actor gained access to the personal data of serving officers, administrative agents, and contractors.

The intrusion took place on 17 and 18 March 2026. According to the Directorate General of the National Police (DGPN), the attacker was able to read identification data held on the platform, but the records were not linked to operational police files. On a cybercrime forum, a hacker using the alias "HexDex" claimed to have stolen a database of 176,317 agent profiles — a figure that was not confirmed by the DGPN or the Ministry of the Interior.

The exposed data categories reportedly included:

• First and last names
• Administrative place of assignment (residence administrative)
• Email addresses declared on the platform
• The title of the e-learning course being followed

The DGPN said immediate corrective measures were taken to contain the incident, and affected staff were notified by official email on 15 April 2026. The E-campus platform was taken offline for maintenance and access was restored progressively. On 20 April 2026, France's cybercrime unit (BL2C) arrested a young man in the Vendée region, born in August 2004, suspected of being "HexDex."