Overview
- DumpSec is advertising a dataset reportedly around 65 GB with about 1,557,000 student photos, according to French Breaches, though UNSS has not validated the figures.
- UNSS filed a complaint, notified France’s data authority CNIL, engaged the national cybersecurity agency ANSSI, and activated its incident-response procedures.
- Data potentially affected include names, identifiers, dates of birth, school details, insurance information, and photo URLs, while financial and disability-related data are not believed to be involved.
- The federation says access links to the images were rendered inoperative after illegal excerpts from its OPUSS management tool circulated.
- Previous intrusions highlighted security weaknesses in 2025, and DumpSec has separately claimed a large theft tied to Cegedim Santé affecting data of millions of French people.