univ-rennes.fr Listed by FunkSec Ransomware Group

On March 8, 2025, the ransomware group FunkSec added univ-rennes.fr to its leak site, claiming that internal files from the University of Rennes had been exfiltrated during a ransomware attack. The breach affects current and former students, faculty, staff, and anyone whose personal information was stored in the university’s systems. While the exact number of individuals impacted remains unknown, the exposure of internal documents means sensitive data linked to real people may now be in the hands of attackers.

What Public Reporting Shows

Public reporting indicates the University of Rennes, a major French public research institution split between science-focused University of Rennes 1 and arts-and-social-sciences-focused University of Rennes 2, was hit by a ransomware operation. The attackers successfully exfiltrated internal files before encrypting systems or while systems were locked. As of March 8, 2025, samples or proof of the stolen data appeared on the FunkSec leak site hosted on the dark web. No precise victim count or complete list of exposed data types has been publicly detailed, but the nature of “internal files” in a university environment typically includes documents containing names, addresses, dates of birth, student IDs, employee records, research data, and possibly financial or medical information tied to campus services.

Why This Matters for You and Your Family

If you or your children attended, worked at, or interacted with the University of Rennes, your information may now be circulating among criminals. Internal files exfiltrated can contain the exact details attackers need to open accounts in your name, file fraudulent tax claims, or target your family with phishing emails that look legitimate because they reference real campus activities. Even if you left the university years ago, old records often stay in active databases. For families, the risk extends beyond the individual: one compromised parent record can lead to attacks on children whose information appears in the same files, such as emergency contact forms or scholarship applications.

The Doxxing and Identity-Chain Implications

Stolen university records frequently link email addresses, usernames, phone numbers, and physical addresses. Once attackers have that chain, they can correlate it with data from other breaches to build a complete profile. This is how isolated leaks become persistent harassment. Credential leaks like this one often cascade into gaming account takeovers, especially for students and teenagers who reuse university emails or passwords on Steam, Roblox, Discord, or other platforms. A compromised gaming account can expose chat logs, voice recordings, and location data that further enrich the identity chain, leading to doxxing, swatting, or long-term stalking. Identity-chain mapping turns one breach into dozens of new attack surfaces for you and your family.