---
title: "Data breach at AMCEN (AMCE Normandie)"
description: "A database presented as belonging to the website of AMCEN, an accounting firm based in Caen, France, was released for free on a cybercriminal forum on 3 October 2026. Analysis of the dump indicates it would be a full backup of the WordPress site, taken in summer 2025, with data no more recent than s"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-10-03-amcen-amce-normandie
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-10-03
dateModified: 2026-10-03
---
# AMCEN (AMCE Normandie)

Data breach — Moderate

A database presented as belonging to the website of AMCEN, an accounting firm based in Caen, France, was released for free on a cybercriminal forum on 3 October 2026. Analysis of the dump indicates it would be a full backup of the WordPress site, taken in summer 2025, with data no more recent than spring 2025. The analysis counts about 440 affected people (up to 870 on the high estimate): around 260 unsolicited job applications, around 175 interview requests from company managers, and 27 site accounts whose passwords are hashed. The exposed data includes names, email addresses, phone numbers, professional and application details, message contents, IP addresses and login identifiers.

These contact and professional details let a malicious third party target the people concerned with credible phishing messages, for example by impersonating the firm.

| Fact | Value |
| --- | --- |
| Disclosed on | October 3, 2026 |
| Accounts affected | 440 |
| Sector | Other |
| Country | France |
| Cause | Undisclosed |
| Severity | Moderate |
| Status | Reported |

## Exposed data

- Full name
- Email address
- Phone number
- Employment data
- Customer ID
- Password (hashed)
- Connection data (IP, logs)
- Other personal data

## What you can do

- Change that password — and everywhere you reused it. That is how a leak spreads to your other accounts.
- Turn on two-factor authentication on the affected accounts: a stolen password is then no longer enough.
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [AMCEN](https://frenchbreaches.com/alertes/amcen-mutyyvhhx4zer2dulkd) — FrenchBreaches
- [AMCEN : fuite de données revendiquée touchant 439 personnes](https://fuitesinfos.fr/article/2026-10-03-amcen) — Fuites Infos

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-10-03-amcen-amce-normandie
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees