---
title: "Data breach at Les Clés de l'Atelier"
description: "On September 28, 2026, a database purportedly originating from the website of French vocational training organization Les Clés de l'Atelier, based near Lyon and specializing in building trades, was posted for free on a cybercriminal forum. The claimed file contains roughly 10,193 records covering cl"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-28-les-cles-de-l-atelier
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-28
dateModified: 2026-09-28
---
# Les Clés de l'Atelier

Data breach — Critical

On September 28, 2026, a database purportedly originating from the website of French vocational training organization Les Clés de l'Atelier, based near Lyon and specializing in building trades, was posted for free on a cybercriminal forum. The claimed file contains roughly 10,193 records covering close to 7,800 trainees, including identity details, dates and places of birth, training programs and session dates, plus sensitive fields such as disability status or a record of training in prison; for around 800 individuals, the data reportedly also includes a national insurance (social security) number. The organization has not yet publicly confirmed the full scope of the incident.

Exposure of disability status, prison-related training records, or social security numbers could expose affected individuals to stigmatization or identity theft if the data is reused.

| Fact | Value |
| --- | --- |
| Disclosed on | September 28, 2026 |
| Accounts affected | 7,821 |
| Sector | Education |
| Country | France |
| Cause | Undisclosed |
| Severity | Critical |
| Status | Confirmed |

## Exposed data

- Full name
- Date of birth
- Customer ID
- Employment data
- Health data
- Social security number
- Other personal data

## What you can do

- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- Health data is “special category” data under the GDPR: a leak opens a right to compensation, and the organisation must notify the DPA within 72 hours.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Les Clés de l’Atelier](https://frenchbreaches.com/alertes/les-cl-s-de-l-atelier-mulcuy15p8t3i1p5war) — FrenchBreaches
- [Les Clés de l'Atelier : fuite de données revendiquée visant 7 821 stagiaires](https://fuitesinfos.fr/article/2026-09-28-les-cles-de-l-atelier) — Fuites Infos
- [Les Clés de l'Atelier : une fuite expose des données de stagiaires](https://www.cyberattaque.org/les-cles-de-latelier-une-fuite-expose-des-donnees-de-stagiaires/) — Cyberattaque.org
- [Les Clés de l'Atelier Dataset Allegedly Shared for Free](https://darkwebinformer.com/les-cles-de-latelier-dataset-allegedly-shared-for-free/) — DarkWebInformer
- [Les Clés de l'Atelier Dataset Allegedly Shared for Free](https://www.hendryadrian.com/les-cles-de-latelier-dataset-allegedly-shared-for-free/) — HendryAdrian

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-28-les-cles-de-l-atelier
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees