Nomad Education
ModerateReportedEducation
On 16 October 2026, a seller announced on a cybercriminal forum the sale of a database of 4,852,437 user records from Nomad Education, a French study-support app. The listing includes a 1,000-record sample. According to the claim, the records contain names, email addresses, usernames, technical identifiers and dates of birth where provided. The seller states that about 500,000 email addresses are placeholder values. The number of distinct people affected has not been established. The app's users include minors. The claim has not been confirmed by the organisation at this stage.
Names combined with email addresses and dates of birth would allow a malicious third party to run targeted phishing attempts against students or their families.
- Disclosed on
- October 16, 2026
- Sector
- Education
- Country
- France
- Cause
- Undisclosed
Exposed data
- Full name
- Email address
- Date of birth
- Customer ID
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact