AFPA
HighReportedPublic sector
On September 15, 2026, an actor posted on a cybercriminal forum a claim offering for sale a database presented as originating from AFPA, the French public agency for adult vocational training. The file allegedly contains 971,420 records, though the number of distinct individuals is not specified. The sample shown reportedly includes personal identity details (title, first name, last name, date of birth), a full postal address, a phone number, and an internal identifier, suggesting a system used to manage trainee accommodation rather than the agency's public website. AFPA has not publicly confirmed this claim.
Combined, this identity and contact data could facilitate targeted phishing or identity theft attempts.
- Disclosed on
- September 15, 2026
- Sector
- Public sector
- Country
- France
- Cause
- Undisclosed
Exposed data
- Full name
- Date of birth
- Postal address
- Phone number
- Customer ID
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact