A cyberattack has been reported against the Association of Mayors of France (AMF), a group representing over 34,000 mayors and local officials. The attack resulted in the theft of data from more than 100,000 entries, which the AMF has confirmed and reported to the CNIL, France’s data protection authority. The AMF is a key organization in French local governance, and the breach has raised concerns about the security of sensitive information held by public institutions. According to the website FrenchBreaches, a hacker known as "Alduin" claimed responsibility for the attack on a hackers' forum. The method used was an SQL injection, a type of cyberattack that exploits vulnerabilities in a database’s code to gain unauthorized access. Specifically, the hacker used a "Union type" SQL injection, which allows attackers to combine queries and extract data from a database. This method is commonly used to bypass security measures and access confidential information. The stolen data includes personal information such as names, first names, email addresses, and details about the individuals’ roles in local government, such as their commune or intercommunality, their functions, and the dates of their subscriptions. Additionally, the database reportedly contained clear passwords, which could pose a risk if they were used for other online accounts. However, the AMF clarified that not every entry represents a unique individual, meaning that some records could be duplicates or relate to the same person. The breach has sparked concerns about the security of cyber protections in France, especially since the data involved relates to mayors, territorial agents, and other local officials who handle sensitive public information. The incident highlights the need for stronger cybersecurity measures in public administration, as the exposure of such data could potentially be used for identity theft, phishing attacks, or other malicious activities.