Cyberattack in Hauts-de-France Compromises Data of Over 700,000 Individuals

On October 3, 2026, the Hauts-de-France region in France announced a major cyberattack targeting two of its service providers, Atexo and Docaposte, resulting in a comprehensive data breach affecting potentially more than 700,000 individuals. The attack compromised personal information including names, email addresses, and possibly sensitive bank account details (RIB). The breached data is linked to the Génération#HDF program, which supports high school students and apprentices in purchasing educational materials.

The region promptly filed a complaint with the authorities and shut down the compromised platforms to contain the breach. The National Cybersecurity Agency (ANSSI) has been alerted and is involved in the investigation. While the exact scope and details of the breach remain unclear, the specialized monitoring site FrenchBreaches reported that an attacker claimed possession of data on over 700,000 people, although this number is yet to be independently verified.

France continues to face frequent cyberattacks, with reports highlighting vulnerabilities in defenses and the attractiveness of its data on the black market, where stolen information is often sold for fraudulent purposes.

The Hauts-de-France authorities are actively working to assess the full extent of the incident and enhance security measures. Affected users have been notified, and investigations are ongoing to determine the impact and prevent future breaches.