Skip to content
Tips? Soon

Around 318,000 Student Records, Including Minors and Facial Photos, Allegedly Leaked From France's Région Occitanie

Breach Report France flagFrance Government Minors Affected

Around 318,000 Student Records, Including Minors and Facial Photos, Allegedly Leaked From France's Région Occitanie

A threat actor using the alias xMetah has posted what they describe as a database from laregion.fr, the official site of France's Région Occitanie (Pyrénées-Méditerranée), one of the country's regional governments. The leak reportedly contains 318,751 records (about 181 MB) plus a second file said to hold photos of students' faces. Per the post, each record includes a student's name, birthdate, home address, phone number, and email, alongside a parent or guardian's name and contact details, school or training-establishment information, and regional card details. Because many of the listed birthdates indicate the individuals are minors, this exposure carries heightened child-safety risk. The dataset's authenticity and scope are unverified.

Data318K records
AccessPoints-gated
CountryFrance flagFrance
ActorxMetah

Post details

TargetRégion Occitanie (laregion.fr)
CountryFrance flagFrance
SectorGovernment / Education
Claim318,751 records + student photos
DataStudent PII (incl. minors), parent contacts
Files2 (records + facial photos)
ObservedJun 22, 2026
ActorxMetah

!Allegedly included

  • 318,751 records (claimed)
  • Photos of students' faces
  • Student names & birthdates
  • Home addresses
  • Phone numbers & emails
  • Parent / guardian contacts
  • School / training details
  • Regional card details

Screenshot

Potential impact

This is a critical exposure because it allegedly involves the personal data of students, many of whom appear to be minors based on the listed birthdates, together with photos of their faces. The combination of a child's full name, date of birth, home address, contact details, and a facial photograph is among the most dangerous categories of data to expose: beyond identity theft and fraud, it creates direct safety risks to children, including stalking, targeting, and exploitation. Parent and guardian contact details and school information further increase the potential for targeted social-engineering and scams aimed at families. No student or parent records, names, addresses, photos, or download links are reproduced here. Given the apparent presence of minors' data, prompt notification of the affected institutions and families is especially important. The dataset's authenticity and scope are unverified.

iStatus

Unverified

Sample records and a download were posted to a forum behind a points paywall; the sample records, student photos, personal data, and download links are not reproduced here. Because the data appears to include minors, this warrants urgent attention from the affected authorities. The claim has not been independently confirmed and Région Occitanie has not publicly addressed it.

This report concerns the personal data of minors. In the interest of child safety, no sample records, student photos, or download links are reproduced or offered here, redacted or otherwise. For context on other incidents, see the threat feed.

DARK WEB INFORMER - THREAT INTELLIGENCE

Latest