Leak at Pronote

On 11 March 2026, Pronote — the school-management platform published by Index Education and used by the vast majority of French secondary schools — was named in a claimed data leak after access credentials belonging to students and parents were reported circulating for sale on the dark web.

The exposed data consists of Pronote / ENT account logins rather than a compromise of Index Education's central systems. Threat intelligence outlets monitoring French criminal forums (notably ZATAZ, which has repeatedly reported such batches to ANSSI) found credentials being resold by an actor specialising in stolen accounts. Index Education has consistently maintained that Pronote itself was not hacked, attributing exposed accounts to phishing and individual credential theft rather than a breach of its infrastructure.

Reported exposed data categories:

• Account login email addresses
• Account passwords
• Associated school / establishment identifiers

The leak sits within a wider 2026 climate of attacks against French education platforms, including phishing campaigns and false bomb threats sent through compromised Pronote and ENT accounts. The exact scale of this specific batch was not authoritatively confirmed, and no individual count is reported here. Affected accounts are typically remediated through forced password resets and reinforced authentication; the overall status of this claim remains unconfirmed.