National Police: cyberattack against the e-campus platform, 176k officers affected

On 15 April 2026, France's National Police (DGPN) — the country's central police directorate — confirmed that its e-campus online training platform had been compromised in a cyberattack that took place around 17–18 March 2026. The platform, used to deliver professional training to police, gendarmes and ministry staff, is operated by a third-party provider, and the intrusion targeted that peripheral system rather than operational police files.

The threat group HexDex claimed responsibility on a hacking forum ahead of the official confirmation, advertising a database of 176,317 unique profiles tied to French state agents — police officers, gendarmes, civil servants, contractors and administrative personnel. The DGPN stressed that the exposed information did not originate from operational law-enforcement databases.

Exposed data categories reportedly included:

• Names and professional email addresses
• City, country and time-zone / geographic location
• Login history
• Internal badges earned and training modules completed
• Tools and portals used

Because the leak maps named agents to their roles and contact details, analysts flagged a heightened risk of targeted phishing, impersonation and social-engineering campaigns against personnel. The DGPN said it took immediate steps to contain the incident and secure access; the e-campus platform was placed into maintenance and restored gradually while technical investigations continued.