Data breach at Créteil academy exposes student and staff personal information
The Créteil academy disclosed a cyber intrusion in late July that led to the theft of personal data belonging to students and employees.
The Académie de Créteil announced that its information systems were compromised at the end of July, resulting in a massive download of personal data. Joint analysis with the Agence nationale de la sécurité des systèmes d’information identified the compromised sources as the student registers and staff directory covering the 2025-2026 and 2026-2027 academic years. Information taken comprises full names, dates of birth, INE numbers, email and postal addresses, phone numbers, as well as academic grades and teacher comments; data of students' legal representatives may also have been exposed.
The Commission nationale de l’informatique et des libertés has been alerted and a criminal investigation is underway. The academy, which serves Seine-Saint-Denis, Val-de-Marne and Seine-et-Marne, says it has promptly reinforced its IT defenses and is warning the community to avoid responding to suspicious messages or providing credentials.
