Naar inhoud

    Cybersecurity Incident – GAEL Platform (DELF–DALF)

    France Éducation International informs you that a malicious cyber incident targeted the GAEL platform between 9 January and 12 January 2026. Kindly be informed that this cybersecurity incident concerns only the GAEL platform managed by France Éducation International and is not related to any European School of MOL data breach.

    GAEL is the platform used for the management of DELF and DALF diplomas worldwide.

    Nature of the Incident

    This cyberattack resulted in unauthorized access to part of the personal data of candidates and diploma holders registered for DELF–DALF examinations since 2005.

    As soon as France Éducation International was informed of the incident, immediate measures were implemented to stop the data breach. Access to the GAEL platform was suspended as a precautionary measure.

    Initial investigations indicate that the attack appears to have originated from the compromise of two external user accounts. Investigations are ongoing in cooperation with our technical service provider, and additional security measures are being prepared prior to the platform’s reopening.

    Data Concerned

    The incident potentially affects approximately 5.8 million candidates and diploma holders who registered for DELF–DALF examinations since 2005, for all levels and versions.

    The DELF Pro (DELF option professionnelle) is not concerned by this incident.

    The data accessed consists exclusively of civil status information:

    • Title
    • Last name
    • First name
    • Birth name
    • City of birth
    • Country of birth
    • Date of birth
    • Nationality
    • Mother tongue
    • First examination centre of registration

    At this stage of the investigation, no other data has been identified as affected.

    Email Notifications

    An email notification has been sent to approximately 230,000 individuals whose email addresses were available in the GAEL platform.

    Please note:

    Providing an email address is not mandatory at the time of registration.

    In accordance with our data protection policy, contact details are automatically deleted one year after the examination session.

    France Éducation International therefore does not hold all candidates’ email addresses.

    For this reason, examination centres are requested to relay this information to their candidates through all appropriate means (targeted emails based on locally collected data, publication on websites, notices at registration locations, or any other effective communication channel).

    Potential Risks and Recommendations

    The main potential risk associated with this incident is identity theft.

    We urge all concerned individuals to exercise increased vigilance, particularly regarding:

    Suspicious emails or messages requesting personal information

    Fraudulent phone calls

    Unusual administrative or financial activity

    Regulatory and Legal Actions

    France Éducation International has notified the French Data Protection Authority (CNIL) and has filed a formal complaint with the relevant authorities.

    We sincerely regret the consequences of this situation and remain fully mobilized to limit its impact.

    GAEL Platform – Security Measures and Reopening

    The GAEL platform remains temporarily suspended. Its reopening is expected after the deployment of reinforced security measures.

    Upon restoration of access:

    All GAEL passwords will be reset.

    Users will be required to define a new password using the “Forgot password?” function.

    Each GAEL user ID must be used strictly by one individual, in compliance with IT security rules.

    As the intrusion was made possible through the compromise of vulnerable email accounts, all users whose email address serves as a GAEL login are strongly advised to immediately change the password of their email account (e.g., Gmail, Yahoo, etc.).

    The security of information systems is a shared responsibility. We thank all partners and stakeholders for their cooperation.

    Further Information

    An evolving FAQ (Frequently Asked Questions) is available on the France Éducation International website and will be updated regularly.

    Candidates seeking additional information may contact the Data Protection Officer via the contact details provided on the official website.

    For professionals managing DELF–DALF activities, a dedicated address has been created for urgent matters related to the temporary suspension of the platform:

    incident-GAEL@france-education-international.fr

    This address is strictly reserved for professional use and should not be communicated to candidates in order to avoid communication congestion.