univ-rennes.fr Listed by funksec Ransomware Group

On March 8, 2025, the ransomware group FunkSec added univ-rennes.fr to its leak site, claiming that internal files from the University of Rennes had been exfiltrated during a ransomware attack. The breach affects current and former students, faculty, staff, and anyone whose personal information was stored in the university’s systems. While the exact number of individuals impacted remains unknown, the exposure of internal documents means sensitive data linked to real people may now be in the hands of attackers.

What's Publicly Reported from Reporting

Public reporting indicates the University of Rennes, a major French public research institution split between science-focused University of Rennes 1 and arts-and-social-sciences-focused University of Rennes 2, was hit by a ransomware operation. The attackers successfully exfiltrated internal files before encrypting systems or while systems were locked. As of March 8, 2025, samples or proof of the stolen data appeared on the FunkSec leak site hosted on the dark web. No precise victim count or complete list of exposed data types has been publicly detailed, but the nature of “internal files” in a university environment typically includes documents containing names, addresses, dates of birth, student IDs, employee records, research data, and possibly financial or medical information tied to campus services.

Why This Matters for You and Your Family

If you or your children attended, worked at, or interacted with the University of Rennes, your information may now be circulating among criminals. Internal files exfiltrated can contain the exact details attackers need to open accounts in your name, file fraudulent tax claims, or target your family with phishing emails that look legitimate because they reference real campus activities. Even if you left the university years ago, old records often stay in active databases. For families, the risk extends beyond the individual: one compromised parent record can lead to attacks on children whose information appears in the same files, such as emergency contact forms or scholarship applications.

The Doxxing and Identity-Chain Implications

Stolen university records frequently link email addresses, usernames, phone numbers, and physical addresses. Once attackers have that chain, they can correlate it with data from other breaches to build a complete profile. This is how isolated leaks become persistent harassment. Credential leaks like this one often cascade into gaming account takeovers, especially for students and teenagers who reuse university emails or passwords on Steam, Roblox, Discord, or other platforms. A compromised gaming account can expose chat logs, voice recordings, and location data that further enrich the identity chain, leading to doxxing, swatting, or long-term stalking. Identity-chain mapping turns one breach into dozens of new attack surfaces for you and your family.

FunkSec’s Publicly Known Track Record

Public reporting attributes the attack to the FunkSec ransomware group. The group emerged in late 2024 and has targeted a range of organizations, including educational institutions and mid-sized enterprises. Their typical playbook involves gaining initial access through phishing or exploited vulnerabilities, exfiltrating data before deploying ransomware, and then pressuring victims with threats to publish stolen files on their leak site if ransom demands are not met. FunkSec’s extortion style relies on public shaming and the threat of selling or freely releasing sensitive internal documents rather than solely focusing on encryption alone.

What to do

• Run a DoxxScan to map every link between your university email, handles, phone numbers, and real identity so you can see exactly what chains exist today.
• Rotate any password you ever used at univ-rennes.fr anywhere else it is reused, and switch to 2FA through an authenticator app instead of SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your data appears it is caught and acted on within hours.
• Cover the household with DoxxScan family coverage that includes dependents and your children’s gaming accounts, which often chain back to the same addresses and emails used for school records.
• Let remediation specialists handle the time-consuming work of sending takedown requests to data brokers and monitoring for reappearance of your information.

The University of Rennes breach is a reminder that data stolen today can fuel identity theft and harassment for years. Taking concrete steps now limits how far attackers can travel down the identity chain that begins with this leak. Start your DoxxScan trial and use its continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage—including children’s gaming accounts—to protect yourself and your family from cascading threats like this one.