CTIPilot
AI-generated · no human review · verify critical claims against the linked source. how it works →

Vaud post-compulsory school IT-support platform data theft (October 2026)

incident · incident:vaud-dgep-it-support-platform-data-theft-2026-10 single-source-victim

Unauthorised access, detected on 2026-10-26 by the Vaud Direction générale de l'enseignement postobligatoire, to the IT-support platform of the canton's Gymnases and professional schools, which copied the names and school e-mail addresses of about 3,500 teachers and 38,000 pupils and the content of support requests; the canton published it on 2026-10-31 (Canton of Vaud press release).

Aliases: Vaud Gymnases and Ecoles professionnelles support platform breach

Coverage
1
first 2026-11-01 → last 2026-11-01
Latest activity
2026-11-01
Canton Vaud: school IT-support platform breached; data of about 3,500 teachers and 38,000 pupils copied
Peak priority
routine
1 routine
Targets
public-sector
sectors: public-sector, education · regions: switzerland
Sources cited
2
2 hosts

Defender insights

What each entry about Vaud post-compulsory school IT-support platform data theft (October 2026) tells a defender to do, newest first.

Story timeline

  1. 2026-11-01Canton Vaud: unauthorised access to the IT-support platform of its Gymnases and professional schools copied the names, school e-mail addresses and support requests of about 3,500 teachers and 38,000 pupils, and RTS reports a pupil is suspected
    active-threatsCanton Vaud: school IT-support platform breached; data of about 3,500 teachers and 38,000 pupils copied

Hunting pivots

Tags
data-breachphishing
ATT&CK techniques (1 across 1 tactic)

1 technique observed across 1 entry about this entity, derived from entry metadata and body evidence, never asserted without a published entry behind it · pinned to MITRE ATT&CK v20.0 · compare on the matrix · Navigator layer (JSON)

  • CollectionData from Information Repositories

Collection TA0009

T1213Data from Information Repositories×1

Adversaries may leverage information repositories to mine valuable information. Information repositories are tools that allow for storage of information, typically to facilitate collaboration or information sharing between users, and can store a wide variety of data that may aid adversaries in further objectives, such as Credential Access, Lateral Movement, or Defense Evasion, or direct access to the target information. Adversaries may also abuse external sharing features to share sensitive documents with recipients outside of the organization (i.e., Transfer Data to Cloud Account).

Evidence: 2026-11-01/vaud-school-it-support-platform-data-theft-teachers-pupils · ATT&CK page ↗

Entries about Vaud post-compulsory school IT-support platform data theft (October 2026) (1)

2026-11-01 · view entry permalink →

ROUTINENATOA2

Canton Vaud: unauthorised access to the IT-support platform of its Gymnases and professional schools copied the names, school e-mail addresses and support requests of about 3,500 teachers and 38,000 pupils, and RTS reports a pupil is suspected

The Swiss canton of Vaud says unauthorised access, detected on 2026-10-26, to the IT-support platform of its Gymnases and professional schools copied the names, school e-mail addresses and support requests of about 3,500 teachers and 38,000 pupils; passwords are not stored on the platform and no grades or pupil files are affected (Etat de Vaud, 2026-10-31). The canton names targeted fraudulent messages that pose as the school or IT support as the main risk, and RTS reports, from the canton's latest information, that everything points to a pupil, with no context, reason or objective known (Etat de Vaud, 2026-10-31; RTS, 2026-10-31, translated from French); the canton gives no access method, actor or platform product.

The names, first names and school e-mail addresses of about 3,500 teachers and 38,000 pupils were copied, as was the content of support requests. (translated from French)

The main risk for the people concerned is the receipt of targeted fraudulent messages posing as the school or IT support. (translated from French)

Etat de Vaud

According to the latest information given by the State of Vaud, everything points to the theft having been committed by a pupil. (translated from French)

RTS 2026-10-31
incident01 Nov 03:35Zsingle-source · victim disclosureOpen finding →
Sources: Etat de Vaud (press release of the Bureau d'information et de communication) · RTS

explore in graph

Where this entity is cited

  • Threats1

Source distribution

  • rts.ch1 (50%)
  • vd.ch1 (50%)
All cited sources (2)