---
title: "Data breach at Vackelys"
description: "On 17 October 2026, an attacker claimed to be selling data taken from the Vackelys website: 3,553 people, 17,348 records and 2,070 files, totalling 5.75 GB. The samples shared with the outlet contain surnames, first names, participant identifiers and file names that mention a \"valid passport\". These"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-10-17-vackelys
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-10-17
dateModified: 2026-10-17
---
# Vackelys

Data breach — Critical

On 17 October 2026, an attacker claimed to be selling data taken from the Vackelys website: 3,553 people, 17,348 records and 2,070 files, totalling 5.75 GB. The samples shared with the outlet contain surnames, first names, participant identifiers and file names that mention a "valid passport". These are references to files, and the contents of the documents were not seen. The figures come solely from the attacker and have not been independently verified. Vackelys has not confirmed the incident.

If copies of passports were actually in the files, they could be used for identity theft or document fraud, but their presence has not been established.

| Fact | Value |
| --- | --- |
| Disclosed on | October 17, 2026 |
| Accounts affected | 3,553 |
| Sector | Public sector |
| Country | France |
| Cause | Undisclosed |
| Severity | Critical |
| Status | Reported |

## Exposed data

- Full name
- Customer ID
- Identity document

## What you can do

- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Vackelys (Pompiers)](https://frenchbreaches.com/alertes/vackelys-pompiers-muzhnz58lx19do6zyxd) — FrenchBreaches

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-10-17-vackelys
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees