Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Académie de Montpellier / CSJM

ac-montpellier.fr

Discovered 2026-05-05 20:31 UTC
Est. attack date 2026-05-05
Country FR

Description:

French public school network. Domain CSJM.BEZIERS, part of Académie de Montpellier (ac-montpellier.fr). Occitanie region (laregion.fr). Teacher and admin staff credentials.

Infostealer activity detected by HudsonRock

Compromised Employees: 309

Compromised Users: 6915

Third Party Employee Credentials: 217


External Attack Surface: 111


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • gilles.scholtesac-montpellier.fr
  • domainerenater.fr
  • eric-jourdanac-montpellier.fr
  • nicolas.barachetac-montpellier.fr
  • ce.recds2iac-montpellier.fr
MX Records
  • msg-a85.education.gouv.fr.
  • msg-b85.education.gouv.fr.
TXT Records
  • apple-domain-verification=UEPjVVq30tJ3umeW
  • google-site-verification=3iw7l6FVej8Etu1Y76fdBg7CTgf4UAmXl3vaBRwKWsQ
  • gbd4Xa/Y+IOvDEOLfYXq0g9r77k=
  • have-i-been-pwned-verification=dac5361dda30c641bc028858fba6628d
  • HARICA-uoYVLAzb4h5dV3G4WHs
  • MS=80BFCAFB646F48428D493923FA3D7632E5B97A76
  • v=spf1 ip4:195.83.225.88/30 ip4:193.51.147.21/28 ip4:193.51.147.200/29 ip4:194.254.206.80/29 ip4:193.54.151.80/29 include:_spfacad.phm.education.gouv.fr ~all
Cloud / SaaS Services Detected
Apple Have I Been Pwned

Leak Screenshot:

Leak Screenshot