Skip to content
Back to Blog
high severity May 13, 2026 · unknown affected

Thales Group Linked to LuxTrust Data Leak on Forum

A dataset allegedly from NATO defense supplier Thales Group appeared on a hacker forum, containing records linked to Luxembourg digital identity provider LuxTrust. Samples suggest exposure of user records tied to defense, aerospace, and government identity infrastructure. The claim surfaced publicly in mid-May with limited details on scope or method.

⚠ Were you affected?
Free email scanner — we check your address against 15B+ leaked records (including this breach) in 15 seconds.
Run free scan →
Thales Group Linked to LuxTrust Data Leak on Forum
Data exposed:
  • personal-information
  • identity-data

A dataset allegedly belonging to Thales Group, a major NATO defense supplier, appeared on a hacker forum in mid-May 2026, with records linked to Luxembourg digital identity provider LuxTrust. The exposed material contains personal and identity data tied to defense, aerospace, and government infrastructure, though the precise number of affected individuals remains unknown.

Public reporting from Cybernews indicates the claim surfaced on May 13, 2026, when forum users began circulating samples of the dataset. The files appear to originate from LuxTrust systems, which provide digital identity and trust services across European government and enterprise environments. Available reporting describes the data as including personal information and identity records, but has not confirmed the breach method, exact volume, or whether the material was stolen directly from Thales or obtained through a third-party compromise. Thales Group has not issued a public statement detailing the incident as of the latest available information.

You've read 2 of 2 free articles today — reset tomorrow.

Want the rest of this breakdown?

Sign up free to keep reading. Members get extended access, the weekly breach digest, and a complimentary DoxxScan™ to see if their identity is exposed in the breaches we cover.

Full breach archive
Weekly threat digest
72hr DoxxScan™ free trial
Why this isn’t just another breach checker

A breach leaks your credentials. Then hackers chain those credentials to your address, family, phone, and employer using public broker sites. We’re the only tool built around that chain.

Free checker Tells you the breach happened. End of story. You’re still on 800+ broker sites.
$129+/yr Broker-removal services scrub the address but don’t see the breach — next leak re-exposes you.
GalaxyWarden Maps the chain. Cleans both halves. $14.99 one-shot. Closed loop.

⚠ Were you in this breach?

Free email scanner. We check your address against 15B+ leaked records (including this breach) in 15 seconds — then show you the $14.99 cleanup that removes you from the broker sites aggregating leaked data.

Check my email — free →

Protect yourself from breaches

GalaxyWarden scans 15B+ leaked records. Pair it with these tools for complete protection.

Try DoxxScan — 72hr free trial
See exactly what hackers found about you — full results unlocked during your Warden trial ($9.99/mo after)
GalaxyWarden Monitoring 24/7
Real-time breach alerts + AI Warden security assistant + continuous dark web monitoring
NordPass NordPass 56% OFF
Unique passwords + autofill + breach alerts
NordVPN NordVPN 74% OFF
Hide your IP + block malicious sites & trackers
NordProtect NordProtect $0.99/mo
$1M identity theft insurance + credit monitoring
View All Partner Deals →

GalaxyWarden services + partner recommendations

Built by the same team that secures Fortune 500 and Inc. 500 companies. · 15B+ breach records · 95+ platforms monitored · 8 years in cybersecurity · Zero data sales, ever.