2,393 officials affected by a Police, Gendarmerie, CNIL data leak

On 20 February 2026, a cybercriminal — publishing on clandestine forums — released a database exposing 2,393 French state agents drawn from the National Police, National Gendarmerie, the Ministry of the Armed Forces, the DGSI and DGSE intelligence services, Customs, and the data-protection regulator CNIL (including roughly 86 CNIL staff).

The leak was not the result of a direct intrusion into a single government system. Instead, it was an aggregated compilation cross-referenced from more than 400 distinct prior breaches affecting both private and public services. Malicious actors filtered and centralised those datasets by querying for official email domains such as .gouv.fr and gendarmerie.defense.gouv.fr, then assembled the matching records into a single targeted file before circulating it underground.

Exposed data categories included:

• Identity details: surname, first name, date of birth, gender, nationality and aliases
• Contact information: professional email, personal phone number and postal address
• Professional information: rank, assignment and employment status
• Sensitive data: mentions of disability and references to medical certificates

Because the affected individuals work for police, gendarmerie, defence and intelligence services, the disclosure carries an elevated risk of doxxing, harassment, targeted phishing and identity theft. The data remained in circulation on public forums after disclosure, and the incident was reported amid a broader wave of large-scale French data leaks in early 2026.