Académie de Créteil suffers major student and staff data breach

The Académie de Créteil has confirmed a significant data breach following a fraudulent intrusion and data extraction that occurred in late July. The breach affected both students and staff members, specifically targeting data related to the 2025-2026 and 2026-2027 school years.

According to the French Ministry of National Education, the stolen information includes names, first names, dates of birth, national student identifiers (INE), personal email addresses, mobile phone numbers, postal addresses, qualitative assessments, and grades. The academy, which oversees schools in Val-de-Marne, Seine-et-Marne, and Seine-Saint-Denis, serves over 900,000 students and 85,000 staff members.

The academy has notified the Commission Nationale de l'Informatique et des Libertés (CNIL) and is working with the National Agency for the Security of Information Systems (ANSSI). A judicial investigation is currently underway. Authorities have warned the public to remain vigilant against potential phishing attempts and identity theft resulting from the leak.