French Hacker Arrested for Mass Data Theft Targeting Government, Sports, and Private Sector French authorities have arrested a 20-year-old man, known online as HexDex, suspected of exfiltrating data from dozens of organizations and leaking sensitive information. The arrest took place on 20 April 2026 at his home in Vendée, just as he was preparing to release additional stolen data. The investigation began in late December 2025 after nearly 100 reports of data breaches were filed with the Paris prosecutor’s office. HexDex is accused of targeting a wide range of victims, including sports federations, government agencies, and private companies, and posting stolen data on platforms like Breachforums and Darkforums. ### Targets of the Attack HexDex allegedly compromised 15 French sports federations, spanning disciplines such as American football, rugby, skiing, boxing, and para-sports. Among the most severe breaches was an attack on the French Ministry of Education in mid-March 2026, where he accessed the Compas trainee teacher management system, exposing 243,000 employees’ personal details, including names, addresses, phone numbers, and absence records. Other high-profile targets included: - SIA (national firearm owner database) - E-campus (police training platform) - Moselle prefecture - ANCT (National Agency for Territorial Cohesion) - Choisir le service public (public service recruitment portal) - Philharmonie de Paris (concert hall) - Charities (food banks) and hotel chains (Logis Hôtels France, Brit Hotel) ### Investigation & Ongoing Probes The Cybercrime Brigade (BL2C) seized HexDex’s devices and took control of his Darkforums account, which now displays a seizure notice. While he has admitted to using the HexDex alias, authorities state he is not linked to a separate 15 April 2026 cyberattack on the ANTS portal, which may have exposed 12 million account holders’ data. HexDex remains in custody as forensic analysis continues to determine the full extent of the breaches.

Attackers stole member data from French Soccer Federation Pierluigi Paganini November 28, 2025 November 28, 2025 The French Soccer Federation (FFF) disclosed a data breach after hackers used a compromised account to steal member data. A compromised account allowed attackers to breach the French Soccer Federation (FFF), stealing data belonging to its members. The organization confirmed the cyberattack on Thursday, but did not disclose the number of members impacted. “The FFF reports that the software used by clubs for their administrative management, and in particular that of their members, has been the victim of a cyberattack and data theft.” reads the data breach notice. “Upon detection of this unauthorized access through the use of a compromised account, the FFF services took the necessary steps to secure the software and data, including immediately disabling the account in question and resetting all user account passwords.” The federation stated that the issue was resolved following the discovery of unauthorized access. The French Soccer Federation detected unauthorized access via a compromised account and immediately secured its systems by disabling the account and resetting all passwords. The organization filed a complaint and ANSSI and CNIL. The FFF will inform all individuals whose emails were in the database. The breach exposed only limited data, including name, surname, gender, birth details, nationality, postal address, email, phone number, and license number