Short answer
On 4 November 2026 the Rassemblement national confirmed a cyberattack on an IT tool used to manage memberships, which led to the unauthorised disclosure of part of some members' data. It says the incident was quickly contained, does not cover the whole member file, and was reported to the CNIL and the Paris prosecutor. A hacker claims 432,597 records, which is not confirmed.
If you think your details were included, start with our checklist on what to do after a data breach.
Key facts
| Organization | Rassemblement national |
|---|---|
| Incident type | Data breach |
| Status | Confirmed by the organization |
| Sector | Political party |
| Country | France |
| Detected | 2026-10-31 |
| Disclosed | 2026-10-31 |
| People or records affected | Not stated by the party. A hacker claims 432,597 records (unverified) |
What data was exposed
- Last and first names
- Email addresses, phone numbers and postal addresses
- Profession
- Membership year, dues amount and affiliated federation
- Birth dates (claimed by the hacker's file, not listed by the party)
What happened
On 4 November 2026, France’s Rassemblement national (RN) confirmed a cyberattack. According to Clubic, the party said an attack on a tool used to manage memberships led to the disclosure, without authorisation, of part of the information of some members. Tom’s Guide France reported the same statement.
What the party says
The RN says the incident was quickly contained and that unauthorised access has ended. It stresses that the whole member file is not involved. The party notified the CNIL, France’s data protection authority, and filed a complaint with the Paris prosecutor. It did not say how many people are affected or when it found the intrusion.
The data it lists is last and first names, email addresses, phone numbers, postal addresses, profession, membership year, dues amount and the federation a member belongs to. Clubic notes that the statement did not mention identity documents or social security numbers.
The hacker’s claim
On 31 October a forum user calling themselves shin0bi posted a claim of 432,597 records linked to the RN and published 150,000 lines as proof, according to the two outlets. This is a claim. The researchers at FrenchBreaches reportedly removed 28,420 duplicate lines, leaving 121,580 distinct lines, and noted that a distinct line is not necessarily a distinct person. They also found inconsistencies, for example a postcode in one department tied to a canton near Toulouse. The file reportedly includes birth dates, which the party’s list does not mention.
Whether the published file matches what was actually taken remains unverified.
Why this data is sensitive
Membership of a political party reveals political opinion, which the GDPR treats as a special category of data under Article 9. That raises the stakes for people in the file, because the risk includes pressure and harassment as well as fraud. The RN itself warned about misuse of political affiliation and about fraudulent approaches that pose as the party.
Scam patterns to expect
Expect messages that quote your membership year or dues amount and ask you to “confirm” a payment or update your card. See our guides on phishing messages and charity and donation scams for how fake appeals work, and what to do after a data breach for the basic steps. If a message threatens to reveal your affiliation unless you pay, do not pay and report it to the police.
What is still unknown
The number of members affected, the entry route, the identity of the attacker and the match between the leaked file and the real data are not public. Clubic also notes that the RN’s website was hacked in July 2026, when the party said member data was not exposed. No source we read links the two events. See all breach reports for related incidents.
Scams to watch for after this breach
Criminals use breach news as cover. Expect messages that mention the incident, quote real details, or offer help.
- Phishing emails and SMS that use your name, membership year or dues amount to impersonate the party or a donation platform.
- Fake calls asking you to confirm your membership, update payment details or make a donation.
- Harassment or extortion messages that threaten to expose your political affiliation.
- Targeted fraud using your postal address, profession and phone number.
What to do if you are affected
- 01Treat unexpected calls, emails and texts that mention the party, your dues or your membership as suspect, as the party itself warns. Do not click links or open attachments.
- 02Never give bank details, a code or a password to anyone who contacts you about the incident. Contact the party through a number or address you looked up yourself.
- 03Be aware that political opinion is sensitive data under the GDPR (Article 9). You can ask the party what data it holds on you and, if affected, complain to the CNIL.
- 04Check your bank statement for unknown payments or debits, especially if you pay dues by direct debit.
- 05Report threats or extortion to the police.
Frequently asked questions
What did the Rassemblement national confirm?
In a statement dated 4 November, signed by Bruno Bilde according to Clubic, the party confirmed a cyberattack on a membership management tool and the unauthorised disclosure of part of some members' information. It says the incident was quickly contained and does not concern the whole member file.
How many members are affected?
The party has not said. A forum user called shin0bi claimed 432,597 records on 31 October and published 150,000 lines. That figure is a claim and has not been confirmed.
Is the leaked file genuine?
Not established. According to Clubic and Tom's Guide, FrenchBreaches found 28,420 duplicates among the lines and mismatches such as postcodes tied to a canton in another department. The party has not said whether the published file matches what was taken.
Were bank details or passwords taken?
The party's list, as reported, covers names, contacts, profession, membership year, dues amount and federation. Clubic notes the statement did not mention ID documents or social security numbers. The hacker's file reportedly adds birth dates.
Is this linked to other French party leaks?
Clubic reports that the French Communist Party confirmed a leak affecting its members in late October. We found no source that links the two incidents, so treat them as separate unless an authority says otherwise.
Sources
- Le Rassemblement national avoue avoir subi une cyberattaque, les données des adhérents récupérées (The Rassemblement national admits a cyberattack, members' data retrieved), Clubic, 2026-11-06
- Cyberattaque contre le RN : les données personnelles des adhérents divulguées en ligne (Cyberattack on the RN: members' personal data disclosed online), Tom's Guide France, 2026-11-06
This post summarises public reporting as of 2026-11-06. Details of live incidents change; we update posts when the organization or regulators publish new facts. Spot an error? See our editorial and corrections policy.