French Ministry of Ecological Transition: more than 1,000 staff accounts compromised

On 26 April 2026, the French Ministry of Ecological Transition — the central government department responsible for ecology, energy and sustainable development — was named in a data leak after a threat actor published a database said to have been extracted from one of its collaborative online platforms.

According to the breach trackers reporting the incident, the actor exploited an application weakness that allowed unauthorised viewing of user data on a shared workspace used by ministry staff and partner organisations. A sample dataset containing 1,154 user profiles, all carrying @developpement-durable.gouv.fr professional email addresses, was released as proof.

The exposed records reportedly include:

• User IDs and usernames
• Full names and professional email addresses
• Registration and last-login dates
• Publication counts and activity metrics
• Group memberships and internal scoring/karma values

The leaked information is well suited to targeted phishing, identity spoofing and internal organisational mapping against ministry staff. As of reporting, no official statement from the ministry had confirmed the authenticity of the database or the exact source service, leaving the status of the incident unconfirmed. The leak followed a separate exposure earlier the same week involving transport-sector data linked to the ministry's digital ecosystem.