Skip to content
InYourGeek
visiteur@inyourgeek — shell
↹ compléter↑↓ historique⏎ ouvrirhelp
FR

The Monday letter · the tech and security week in one email

Free, every Monday, via Brevo (EU), one-click unsubscribe · your data and rights

← Back to the register

INTER-ETAB

CriticalReportedEducation

On 16 October 2026, the sale of a database of 286,773 student records, said to come from the French school software INTER-ETAB, was advertised on a cybercriminal forum. According to the outlets reporting it, the records would combine the student's identity, date of birth, national student identifier, schooling details and legal guardians' contact details (address, phone, email). The published sample, covering about 1,000 students from nine high schools, reportedly also contains plaintext passwords and mostly relates to the 2016 school year intake. The number of distinct individuals and the authenticity of the full dataset are unconfirmed, and the vendor has not communicated so far.

This information would let a malicious third party target minors and their legal guardians with phishing or identity impersonation, and try the exposed passwords on other services.

Disclosed on
October 16, 2026
Sector
Education
Country
France
Cause
Undisclosed

Exposed data

  • Full name
  • Identity document
  • Date of birth
  • Postal address
  • Email address
  • Phone number
  • Customer ID
  • Password (plaintext)

You are only affected if you had an account or an order with this organisation.

What you can do

  • Change that password — and everywhere you reused it. That is how a leak spreads to your other accounts.
  • Turn on two-factor authentication on the affected accounts: a stolen password is then no longer enough.
  • Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
  • These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
  • You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

Sources

Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact

The Monday letter

The tech and security week, every Monday in your inbox

What to patch first, data breaches, the articles with pictures. Free, no ads, one-click unsubscribe.

Free, every Monday, via Brevo (EU), one-click unsubscribe · your data and rights