8,861 staff - data leak at the French Ministries of the Interior & Armed Forces

On 20 February 2026, the French Ministries of the Interior & Armed Forces — two of the French state's largest institutions — saw the personal data of their staff exposed when a compilation of 8,861 records tied to ministry agents surfaced on underground forums and was flagged by the breach-monitoring sites FrenchBreaches and fuitesinfos.fr.

The leak was not the result of a single direct intrusion into a ministry system. Instead, a malicious actor assembled a large aggregate from hundreds of distinct prior data leaks, cross-referencing and centralising records before circulating them. The Interior and Armed Forces staff appeared alongside thousands of other French public-sector agents — including personnel of the National Police, National Gendarmerie, DGSI, DGSE, Customs and the CNIL — within the broader compilation publicised around the same date.

The exposed records reportedly included:

• Names and dates of birth
• Personal and professional contact details (postal addresses, professional email addresses, phone numbers)
• Professional assignments and internal identifiers
• Associated metadata

Because the dataset exposes the identities and contact details of staff working for sensitive interior- and defense-related bodies, it raises material personal-security and targeting risks. As of the disclosure date, the affected institutions had not issued an official confirmation or remediation statement, and the status of the incident remains unknown.