EPITA
ModerateReportedEducation
On 8 October 2026, a seller advertised for sale what they present as a database of 11,074 profiles linked to the computer science school EPITA, along with 2,649 profile photographs. The seller claims it was obtained through automated collection (scraping) and says it had already been extracted a few months earlier. The published sample contains names, @epita.fr email addresses, user identifiers and usernames, nicknames, graduation years and paths to photographs. No password, identity document or bank card number appears in it. No intrusion into the school's systems has been demonstrated so far, and the authenticity of the data has not been established.
Names combined with institutional email addresses and photographs allow a malicious party to target these individuals with convincing phishing messages.
- Disclosed on
- October 8, 2026
- Accounts affected
- 11,074
- Sector
- Education
- Country
- France
- Cause
- Undisclosed
Exposed data
- Full name
- Email address
- Customer ID
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact