ESTIA · Breach

Group claims access to 100,000+ files at ESTIA engineering school

Nov 05, 2026 · 1 min read

A group claims on an underground forum that a vulnerability at ESTIA, a French engineering school in the Basque Country, exposed more than 100,000 files from 2017 to 2026, including IBANs, full names, emails, phone numbers, addresses, nationalities and over 100 resumes. The claim is not independently verified, the school has not responded, and the posters say they are not selling the data. Students and staff should watch for fake payment messages and suspicious bank activity.

By HIFY Radar newsroom Updated 11/05/2026 09:30 AM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A group claimed on an underground forum that a flaw at ESTIA, a French engineering school in the Basque Country, exposed more than 100,000 files from 2017 to 2026. The files would include administrative documents with IBANs and personal data. The claim has not been independently verified and the school has not responded.

Why it matters

If confirmed, the set pairs bank details with identity data, a complete kit for fraud and phishing against students and staff. Anyone linked to the school may receive fake payment or tuition messages.

What to do

Monitor bank accounts and warn students and staff about fake payment messages. Ask ESTIA for an official statement on the claim.

For the technical team

Affected: ESTIA, escola de engenharia francesa no País Basco · ESTIA, a French engineering school in the Basque Country; specific system not stated.
Exploitation: Access claim posted by a group on an underground forum and reported by DailyDarkWeb. The group says it is not selling the data and is simply reporting the flaw. No independent verification and no confirmation from the school.
Fix: No software to update
Vector: Vulnerability at ESTIA, no technical details disclosed; exploitation condition unknown, as the information comes from an attacker claim on a forum.
More details: Files from 2017 to 2026 would include administrative documents with IBANs, full names, emails, phone numbers, physical addresses, nationalities and over 100 resumes. DailyDarkWeb source is subscribers-only. No confirmation from the school so far.