Civil Protection: 525,000 volunteer profiles, including minors
France's National Civil Protection Federation confirmed a cyberattack on its
volunteer-management platform, eProtec. Roughly 525,000 profiles and
15,000 photos may be exposed, including minor cadets.
⚠️ Cyberattack confirmed, figures from independent
analysis. The FNPC confirms the incident and notifies its volunteers, but doesn't
itself disclose a precise volume. The 525,000-profile and 15,000-photo figures come from
FrenchBreaches' analysis, not an official count from the federation.
The numbers
525,000+
User profiles on the eProtec platform potentially compromised,
according to FrenchBreaches' analysis.
FrenchBreaches, August 21, 2026 (analysis, not an official FNPC figure).
15,000
Photographs associated with profiles, potentially exposed.
FrenchBreaches, August 21, 2026.
Minors
Profiles reportedly include "cadets" — minor members of Civil
Protection — particularly sensitive data.
FrenchBreaches, sample analysis.
March
Month of the presumed intrusion into the eProtec platform, publicly
revealed five months later.
FrenchBreaches, August 21, 2026.
Timeline
PRESUMED DATE
March 2026
The intrusion into eProtec, the platform France's National Civil
Protection Federation uses to manage its volunteers, reportedly happened around this
time — not precisely confirmed by the federation itself.
CONFIRMED
August 21, 2026
The FNPC officially confirms the cyberattack and notifies its
volunteers: "At this stage of the investigation, some of your personal data may have
been affected by this incident." A complaint is filed with Paris's cybercrime unit.
INDEPENDENT ANALYSIS
Same date
FrenchBreaches publishes its analysis of available samples:
names, dates of birth, phone numbers, professions, user identifiers, assigned
sections, member status, and associated photographs — for roughly 525,000 profiles and
15,000 photos, figures that do not come from an official FNPC count.
CONFIRMED
Since
The FNPC itself disputes the 525,000 figure, citing numerous
duplicates in the leaked file, and says it is still working to establish the real number
of people affected. This is neither a confirmation nor a denial of the figure — it is an
official dispute that reinforces the caution this dossier already applies: the raw total
should not be read as a count of unique victims.
👶Minors among the exposed profiles
What sets this case file apart from other leaks documented here is the presumed
presence of "cadets" — minor members of Civil Protection — among the affected profiles.
A leak affecting children or teenagers volunteering carries a different risk: these
people didn't choose to create an online account with the same caution reflexes as an
adult, and their parents may not necessarily know this data existed in this form.
What it changes for you
If you or a minor relative volunteer or have volunteered at Civil Protection, your
name, date of birth, phone number and photo could be in this leak. The main risk is a
solicitation posing as the federation or a local section, relying on real details to appear
legitimate. See From Leak to Scam.
🔒 If a minor in your family volunteers at Civil Protection,
explain that a message citing their section or cadet status doesn't prove the sender is
legitimate — always verify through an independent channel.
Frequently asked questions
Is the Civil Protection breach confirmed?
Yes for the incident itself, confirmed by the FNPC. The 525,000-profile figure comes
from an independent analysis, not an official count.
Is minors' data affected?
Yes according to available analysis: cadets (minor members) reportedly appear among
the exposed profiles.
When did the incident happen?
The intrusion reportedly dates to March 2026; public confirmation only came in
August 2026.
📌 Last checked: August 21, 2026. Verifiable
information to report: contact@egidio.app.
Cite this pageEgidio — The Threat Laboratory, "Civil Protection: 525,000 volunteer profiles, including minors," egidio.app/en/laboratoire/civil-protection-volunteers-minors-breach/. Licensed CC BY 4.0.
Free to reuse, including commercially, with attribution. Reuse terms.