Leak at OpQuast

On 30 January 2026, Opquast — a Mérignac-based mission-driven company that produces web-quality assurance standards and runs a widely used web-quality certification — was reported to have exposed personal data belonging to about one hundred people.

The disclosure was tracked by the French breach-monitoring project bonjourlafuite. According to that record, the exposure was limited in scope: the only personal data involved was email addresses, affecting roughly a hundred individuals (likely contacts, trainees or certified users associated with the company's training and certification activities).

Exposed data:

• Email addresses (approximately 100 people)

The incident was small relative to the large French breaches of early 2026, and no broader categories of sensitive data appear to have been involved. No detailed public statement on the attack vector or remediation has been identified, and the incident status remains unconfirmed.