Strasbourg food aid: 10,073 beneficiary records claimed

Q: Is this breach confirmed?

No. This is a claim posted on August 25, 2026 by a hacker using the handle Lagui1337, documented by French outlet Cyberattaque.org. Neither the Red Cross nor the local food bank (Banque Alimentaire du Bas-Rhin) had publicly confirmed or denied it at the time of writing. The source itself states that the exact technical link between the two organizations and the system that was initially compromised remains to be determined.

Q: Is children's data involved?

According to the documented claim, minors born between 2010 and 2020 reportedly appear in the records, which would allow partial reconstruction of family composition. This has not been independently confirmed.

Q: Does 10,073 rows mean 10,073 people?

Not necessarily. The source documenting this claim explicitly states that the number of rows does not necessarily correspond to that many distinct individuals.

⚠️ Claimed, not confirmed — and even the organizational link is unclear. What's known comes from a post spotted and documented by French outlet Cyberattaque.org on the morning of August 25, 2026. The source itself states that the exact technical link between the two organizations named and the system that was initially compromised remains to be determined. Neither the Red Cross nor the Banque Alimentaire du Bas-Rhin (the local food bank) had, to our knowledge, publicly confirmed or denied the claim at the time of writing.

The numbers, and what backs them

10,073

Rows claimed, tied to food aid beneficiaries. The source states this row count does not necessarily correspond to that many distinct individuals.

Cyberattaque.org, based on the claim.

2010–2020

Birth-year range of minors who reportedly appear in the records, per the claim.

Cyberattaque.org.

2026

Active rights and recorded visits reportedly extend into August 2026 — data presented as current, not archived.

Cyberattaque.org.

Public confirmation from the Red Cross or the food bank found at the time of writing.

Checked August 25, 2026.

Timeline

CLAIMED

August 25, 2026, 6:20 AM CET

A hacker using the handle Lagui1337 posts a claim: 10,073 rows tied to food aid beneficiaries in Strasbourg. Cyberattaque.org spots and documents the post the same morning.

📋What the claim describes

Per Cyberattaque.org: personal identifiers (names, first names, gender, dates of birth), geographic information (municipality, postal code, addresses), contact details (emails, phone numbers), administrative case or card numbers, status (referent or beneficiary), start and end dates of entitlement, visit dates, and elements of family composition.

Source: Cyberattaque.org, analysis of the claim.

🧒Why this case file calls for particular care

Two things set this case apart from other breaches documented here. First, minors reportedly appear in the records, which would allow partial reconstruction of family composition — these individuals took no action themselves, and their parents have no way of knowing their data may have circulated. Second, being a food aid beneficiary is not a choice that needs justifying: it reflects financial hardship, potentially revealed without the affected people's consent. We do not detail any individual data here, and we will not.

What this means for you

If you or someone close to you has received food aid in Strasbourg through the Red Cross or the Banque Alimentaire du Bas-Rhin, be alert to any message posing as one of these organizations and asking for identity confirmation, payment, or case renewal via a link. A scammer with real details (a case number, visit dates) can make a message significantly more convincing. See also our case file From leak to scam.

🔒 No food aid organization asks for payment or banking credentials to maintain a case file or ongoing assistance — a message demanding this, even one accurate about your situation, should be verified directly with the organization through a known channel, never via a link received by text or email.

Frequently asked questions

Is this breach confirmed?

No. The source itself states that the exact technical link between the named organizations and the compromised system remains to be determined.

Is children's data involved?

According to the claim, minors born between 2010 and 2020 reportedly appear in the records — not independently confirmed.

Does 10,073 rows mean 10,073 people?

Not necessarily, per the source itself.

📌 Last checked: August 25, 2026. Verifiable information to report: contact@egidio.app.