616 contributors affected by the Paris à cœur ouvert data leak

On 9 January 2026, Paris à cœur ouvert — the campaign website launched the day before by Paris mayoral candidate Sarah Knafo (Reconquête) — was found to be publicly exposing the personal data of contributors to its participation forum, where Parisians could submit proposals for the city.

The forum, which was meant to collect citizen contributions, made the underlying records freely accessible. Cybersecurity researcher SaxX flagged the flaw publicly, noting that the information of several hundred contributors was openly readable — including for users who had explicitly requested anonymity.

The exposed data covered:

• Names
• Email addresses (458 unique addresses recorded)
• Phone numbers (187 recorded)
• IP addresses (437 recorded)

Reporting put the number of affected contributors at roughly 600 (607 in news coverage; the tracker entry lists 616). Following the public disclosure, the campaign deleted all forum contributions and Sarah Knafo stated that the error had been "corrected," indicating the exposure was closed shortly after it came to light.