UNIV LILLE

UNIV LILLE was compromised in a ransomware attack attributed to lapsus$ in December 2025. The organization, operating in the Education sector in France, was added to the group's data leak site as part of an extortion campaign.

lapsus$ operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Student & Staff Records