GeoNat'îdF (Agence régionale de la biodiversité en Île-de-France)
ModerateConfirmedPublic sector
A cybercriminal using the alias "Alduin" claimed on 25 September 2026 to have published data from around 3,400 user accounts of GeoNat'îdF, the regional biodiversity data platform run by the Regional Biodiversity Agency of Île-de-France (ARB îdF). The disclosed data includes names, first names, email addresses, usernames and account status, with many professional addresses belonging to environmental-sector organizations. No naturalist observations or geographic coordinates appear in the sample: the documented leak concerns user accounts, not the biodiversity observation database. The origin of the intrusion remains unknown, and ARB îdF has not issued any public statement so far.
The combination of real identities and professional addresses facilitates targeted phishing campaigns impersonating GeoNat'îdF or ARB îdF, with knowledge of the username and genuine professional address making such messages more credible.
- Disclosed on
- September 25, 2026
- Accounts affected
- 3,400
- Sector
- Public sector
- Country
- France
- Cause
- Undisclosed
Exposed data
- Full name
- Email address
- Customer ID
- Employment data
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact