Les Clés de l'Atelier

CriticalConfirmedEducationSeptember 28, 2026

On September 28, 2026, a database purportedly originating from the website of French vocational training organization Les Clés de l'Atelier, based near Lyon and specializing in building trades, was posted for free on a cybercriminal forum. The claimed file contains roughly 10,193 records covering close to 7,800 trainees, including identity details, dates and places of birth, training programs and session dates, plus sensitive fields such as disability status or a record of training in prison; for around 800 individuals, the data reportedly also includes a national insurance (social security) number. The organization has not yet publicly confirmed the full scope of the incident.

Exposure of disability status, prison-related training records, or social security numbers could expose affected individuals to stigmatization or identity theft if the data is reused.

Disclosed on: September 28, 2026
Accounts affected: 7,821
Sector: Education
Country: France
Cause: Undisclosed

Exposed data

Full name
Date of birth
Customer ID
Employment data
Health data
Social security number
Other personal data

You are only affected if you had an account or an order with this organisation.

What you can do

These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
Health data is “special category” data under the GDPR: a leak opens a right to compensation, and the organisation must notify the DPA within 72 hours.
You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

Sources

Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact