French Hacker Arrested for Mass Data Theft Targeting Government, Sports, and Private Sector French authorities have arrested a 20-year-old man, known online as HexDex, suspected of exfiltrating data from dozens of organizations and leaking sensitive information. The arrest took place on 20 April 2026 at his home in Vendée, just as he was preparing to release additional stolen data. The investigation began in late December 2025 after nearly 100 reports of data breaches were filed with the Paris prosecutor’s office. HexDex is accused of targeting a wide range of victims, including sports federations, government agencies, and private companies, and posting stolen data on platforms like Breachforums and Darkforums. ### Targets of the Attack HexDex allegedly compromised 15 French sports federations, spanning disciplines such as American football, rugby, skiing, boxing, and para-sports. Among the most severe breaches was an attack on the French Ministry of Education in mid-March 2026, where he accessed the Compas trainee teacher management system, exposing 243,000 employees’ personal details, including names, addresses, phone numbers, and absence records. Other high-profile targets included: - SIA (national firearm owner database) - E-campus (police training platform) - Moselle prefecture - ANCT (National Agency for Territorial Cohesion) - Choisir le service public (public service recruitment portal) - Philharmonie de Paris (concert hall) - Charities (food banks) and hotel chains (Logis Hôtels France, Brit Hotel) ### Investigation & Ongoing Probes The Cybercrime Brigade (BL2C) seized HexDex’s devices and took control of his Darkforums account, which now displays a seizure notice. While he has admitted to using the HexDex alias, authorities state he is not linked to a separate 15 April 2026 cyberattack on the ANTS portal, which may have exposed 12 million account holders’ data. HexDex remains in custody as forensic analysis continues to determine the full extent of the breaches.