Overview
- The suspect, who was arrested Monday in Vendée, is a 21-year-old placed in custody on suspicion of using the alias "HexDex" to post stolen data.
- The Paris prosecutor's office says it has handled about 100 reports of data exfiltration since December 19, 2025, with leaks claimed under "HexDex" and reposted on BreachForum and Darkforum, sites used to trade stolen datasets.
- Investigators seized his Darkforum account along with his computers for forensic analysis, and he acknowledged using the pseudonym during questioning, according to the prosecutor.
- The national police cybercrime brigade links him to the mid-March hack of Compas, an Education Ministry HR tool, which exposed roughly 243,000 staff records such as names, addresses and phone numbers.
- Alleged targets span many sports federations as well as the SIA gun-owner registry, unions, hotels and cultural bodies, raising risks of scams for members and customers while police work to map the full scope.