AMCEN (AMCE Normandie)
ModerateReportedOther
A database presented as belonging to the website of AMCEN, an accounting firm based in Caen, France, was released for free on a cybercriminal forum on 3 October 2026. Analysis of the dump indicates it would be a full backup of the WordPress site, taken in summer 2025, with data no more recent than spring 2025. The analysis counts about 440 affected people (up to 870 on the high estimate): around 260 unsolicited job applications, around 175 interview requests from company managers, and 27 site accounts whose passwords are hashed. The exposed data includes names, email addresses, phone numbers, professional and application details, message contents, IP addresses and login identifiers.
These contact and professional details let a malicious third party target the people concerned with credible phishing messages, for example by impersonating the firm.
- Disclosed on
- October 3, 2026
- Accounts affected
- 440
- Sector
- Other
- Country
- France
- Cause
- Undisclosed
Exposed data
- Full name
- Email address
- Phone number
- Employment data
- Customer ID
- Password (hashed)
- Connection data (IP, logs)
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- Change that password — and everywhere you reused it. That is how a leak spreads to your other accounts.
- Turn on two-factor authentication on the affected accounts: a stolen password is then no longer enough.
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact