Université de Toulouse: students and staff exposed after a cyberattack

On 27 April 2026, Université de Toulouse — one of France's largest higher-education and research hubs — was named in a data-leak claim posted by a threat group calling itself LunarisSec, described in reporting as an Algerian-aligned hacktivist crew. The group published screenshots presented as coming from an internal database and claimed to have extracted records tied to the university's academic community.

The leaked dataset, as claimed, consists primarily of academic profiles for faculty researchers, doctoral candidates and university staff. The categories of exposed data reported include:

• Full names (first and last)
• Personal and professional email addresses
• Phone numbers
• Links to public profiles (LinkedIn, HAL, ResearchGate)
• Research domains and thesis titles
• Professional addresses and locations

The same actor claimed parallel intrusions against other French universities, including Aix-Marseille and Bourgogne, around the same period, suggesting a coordinated targeting of the academic sector. No precise count of affected individuals or records was published.

As of reporting, no official confirmation had been issued by the university regarding the authenticity of the files or the real scope of the incident, so the claim remains unverified. Observers noted that, if genuine, the exposed contact details and research metadata could enable targeted phishing, identity theft and intelligence gathering on French research teams and laboratories.