---
title: "Data breach at GeoNat'îdF (Agence régionale de la biodiversité en Île-de-France)"
description: "A cybercriminal using the alias \"Alduin\" claimed on 25 September 2026 to have published data from around 3,400 user accounts of GeoNat'îdF, the regional biodiversity data platform run by the Regional Biodiversity Agency of Île-de-France (ARB îdF). The disclosed data includes names, first names, emai"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-25-geonat-idf-agence-regionale-de-la
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-25
dateModified: 2026-09-25
---
# GeoNat'îdF (Agence régionale de la biodiversité en Île-de-France)

Data breach — Moderate

A cybercriminal using the alias "Alduin" claimed on 25 September 2026 to have published data from around 3,400 user accounts of GeoNat'îdF, the regional biodiversity data platform run by the Regional Biodiversity Agency of Île-de-France (ARB îdF). The disclosed data includes names, first names, email addresses, usernames and account status, with many professional addresses belonging to environmental-sector organizations. No naturalist observations or geographic coordinates appear in the sample: the documented leak concerns user accounts, not the biodiversity observation database. The origin of the intrusion remains unknown, and ARB îdF has not issued any public statement so far.

The combination of real identities and professional addresses facilitates targeted phishing campaigns impersonating GeoNat'îdF or ARB îdF, with knowledge of the username and genuine professional address making such messages more credible.

| Fact | Value |
| --- | --- |
| Disclosed on | September 25, 2026 |
| Accounts affected | 3,400 |
| Sector | Public sector |
| Country | France |
| Cause | Undisclosed |
| Severity | Moderate |
| Status | Confirmed |

## Exposed data

- Full name
- Email address
- Customer ID
- Employment data

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [GeoNat’ÎdF](https://frenchbreaches.com/alertes/geonat-df-muh0ong95l9qveyqzp4) — FrenchBreaches
- [GeoNat'îdF : les données de 3 400 utilisateurs de la plateforme biodiversité francilienne piratées](https://www.cyberattaque.org/geonatidf-les-donnees-de-3-400-utilisateurs-de-la-plateforme-biodiversite-francilienne-pirate/) — Cyberattaque.org
- [GeoNat'îdF : fuite de données revendiquée visant 3 399 utilisateurs](https://fuitesinfos.fr/article/2026-09-25-geonat-idf) — Fuites Infos

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-25-geonat-idf-agence-regionale-de-la
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees