2026 France Éducation nationale — ZeroBytes forum claim; ~4.35M staff IDs + ~1.22M pupils alleged (unverified)

Unverified forum claim with partial ministry confirmation of a related narrower incident — August 18, 2026 reporting. Actor ZeroBytes (same persona linked to the DGFiP tax-authority claim) advertised on a cybercrime forum overnight 17 August 2026 a claimed ~43 GB Ministry of National Education haul with ~346 million raw lines across pupil registers (BE1D), secondary SCONET, federated SCHAAF directories, I-Prof career data, and Créteil/Versailles academy sets. Trade summaries cite deduplicated figures of roughly 1.22 million distinct pupils (many minors), 4.35 million staff identifiers, and ~602,000 academic network accounts, plus parental/guardian linkage in monitoring files. The ministry confirmed on 31 July 2026 a fraudulent 25 July intrusion into the personnel-training information system via a usurped professional account, affecting agents in académies since 2001 (see france-education-nationale-agents2026) and explicitly stating that system held no pupil data, passwords, or bank details. As of 18 August the ministry had not publicly confirmed or denied ZeroBytes’ wider pupil-register scope. ANSSI and CNIL were notified in July; Prime Minister Lecornu convened a crisis cell on 17 August amid the tax-authority fallout. recordsAffected 4350000 reflects the actor/reporter deduplicated staff-identifier figure, labeled unverified; the ~1.22M pupil count is a separate actor bucket. companyConfirmed false for the Aug 17 forum scope.