Leak at Paris Adult Courses Platform

On 2 March 2026, the City of Paris — operator of the Cours d'Adultes de Paris, the municipal adult-education programme — confirmed that personal data tied to its online registration platform had been exposed in a security breach. The incident was first surfaced publicly by a cybersecurity researcher before the municipality acknowledged it.

A file extracted from the platform, predating May 2025, was illegitimately released and circulated by attackers. No technical attack vector has been publicly disclosed; the breach affected historical registration records rather than live banking or authentication systems.

The exposed data included:

• First and last name
• Date of birth
• Email address
• Postal address
• Phone number

According to the City of Paris, no passwords and no banking data were compromised. The municipality nonetheless warned that the leaked details could be reused for phishing and social-engineering campaigns.

The City of Paris filed a criminal complaint and notified France's data-protection regulator, the CNIL, which may open an investigation into the security measures in place. The breach was one of several to hit French public-sector bodies in early 2026.