---
title: "Data breach at AFPA"
description: "On September 15, 2026, an actor posted on a cybercriminal forum a claim offering for sale a database presented as originating from AFPA, the French public agency for adult vocational training. The file allegedly contains 971,420 records, though the number of distinct individuals is not specified. Th"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-15-afpa
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-15
dateModified: 2026-09-15
---
# AFPA

Data breach — High

On September 15, 2026, an actor posted on a cybercriminal forum a claim offering for sale a database presented as originating from AFPA, the French public agency for adult vocational training. The file allegedly contains 971,420 records, though the number of distinct individuals is not specified. The sample shown reportedly includes personal identity details (title, first name, last name, date of birth), a full postal address, a phone number, and an internal identifier, suggesting a system used to manage trainee accommodation rather than the agency's public website. AFPA has not publicly confirmed this claim.

Combined, this identity and contact data could facilitate targeted phishing or identity theft attempts.

| Fact | Value |
| --- | --- |
| Disclosed on | September 15, 2026 |
| Sector | Public sector |
| Country | France |
| Cause | Undisclosed |
| Severity | High |
| Status | Reported |

## Exposed data

- Full name
- Date of birth
- Postal address
- Phone number
- Customer ID

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [AFPA : mise en vente revendiquée de 971 420 enregistrements](https://fuitesinfos.fr/article/2026-09-15-afpa) — Fuites Infos

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-15-afpa
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees