Move Up Formation hacked: database, source code and administrator access leaked

On 22 May 2026, Move Up Formation — a French professional-training organization operating the moveup-formation.fr website — appeared in a new data leak advertised on a cybercrime forum. The attackers claimed to have exfiltrated the platform's complete back end, including its customer database, the full website source code and sensitive administrator credentials.

According to the listing, the stolen data spans an SQL database of roughly 800 MB said to involve about 112,000 individuals, a client.csv export of more than 1,000 customer records, and the site's entire codebase (around 3,000 files across 300-plus folders). The attackers also claimed to hold administrator access tied to the site's Stripe online-payment integration. These figures come from the threat actors' own claims and have not been independently verified.

Exposed data categories reportedly include:

• Customer names, email addresses and phone numbers
• Agency information, stated training needs and on-site message contents
• Request/enquiry status records
• Website source code (potentially exposing API keys, internal configuration and third-party service credentials)
• Administrator access linked to the Stripe payment platform

The attackers also claimed to have defaced the website after the intrusion. The attack vector and the exact scope of the compromise remain unknown, and there is no independent confirmation of whether the alleged Stripe access is still active. With the data circulating publicly on a criminal forum, the incident is treated as ongoing.