Question 17886 — digital

Summary

Ms. Marie Mesmeur draws the attention of the Minister of National Education to the massive data leak which affected several public services, including the Ministry of National Education, following cybersecurity incidents that occurred in 2026, and in particular during this summer. This cyberattack comes at a particularly sensitive time, a few days before the start of the school year. If the protection of agents’ personal data naturally constitutes a major issue, the consequences of this attack also seem to affect the daily functioning of national education services and the preparation for the start of the school year in several academies. Indeed, the disruptions affect several rectorates and are particularly significant in certain academies, notably those of Toulouse and Nantes. Difficulties accessing IT tools and Business applications thus complicate the work of administrative staff and educational teams, even though the services must, at the same time, finalize assignments, make the necessary recruitments and prepare payroll operations for the month of September. This situation gives rise to legitimate concerns about the ability of the administration to ensure, within the usual deadlines, all operations essential for the smooth running of the start of the school year. The question of agent remuneration is particularly worrying: no teacher, administrative or educational staff should find themselves deprived of salary due to the consequences of a computer attack for which they are in no way responsible. In Rennes, primary school teaching staff have, to date, received no precise information concerning the consequences possible consequences of this cyberattack on the administrative management of his situation, his assignments, his procedures with the rectorate or even the payment of his remuneration. While, in secondary education, the teaching staff has still not received their timetable, whereas in previous years it was already available at this time. The teachers were only informed very late that they would not have it before the start of the school year. Likewise, certain contract teachers will, failing that, have to carry out educational assistant missions in their reference establishments, without having, to date, more information on this subject. This lack of information is all the more worrying as staff must be able to have, a few days before the start of the school year, clear and transparent information on the situation of the services on which they depend. their professional activity. It also raises the question of anticipation and the capacity of the ministry to ensure the continuity of the public service of national education in the event of a computer attack of such magnitude. Thus, she asks him what is the exact scope, category by category, of the data compromised during each of the incidents of 2026 and according to what timetable each person concerned will be informed individually of the nature of the data exposed, in accordance with the obligations of the general data protection regulation. She also asks whether an independent security audit of all information systems and security systems for the ministry's assets will be carried out, and when multi-factor authentication will be generalized to all professional and academic accounts. Furthermore, she asks him if, as part of the order for this audit, a section will be devoted to identifying the causes of this data leak, in order to shed light on the circumstances of this leak. She asks what specific support systems will be put in place for contract workers as well as for INSPÉ students and interns, and what human and budgetary resources will be allocated to establishments to absorb the management of these incidents. She also asks what measures will be taken to immediately restore access to the professional tools necessary for the operation of schools, establishments and services, and to guarantee the payment of salaries to all staff as well as the assignment of replacements and contract workers without delay attributable to these incidents. Finally, she asks him what guarantees he intends take so that no disciplinary or administrative sanction can be imposed on an agent who is the victim of identity theft made possible by the failure of ministerial systems, and what resources it intends to devote to the fight against cybercrime.

Machine translation from French. The official text remains authoritative.

Timeline

No timeline events have been ingested for this record yet.

Votes

No vote records are attached yet.

Versions

No version snapshots stored. Document URLs remain at the source.

Documents

No documents linked.

Sponsors

No sponsors or actors listed by the source.

Related records

No cross-record relationships stored yet.