HexDex Arrested: The 21-Year-Old Hacker Who Hit 100+ French Sites
🕵️ Who is HexDex?
Behind the pseudonym HexDex is a self-taught young man born in August 2004, living in the Vendée region of western France. Operating from home, he targeted French databases and published stolen data on Darkforum, a platform specialising in selling stolen data.
The Brigade de lutte contre la cybercriminalité (BL2C) — Paris's cybercrime unit — and the cyber section of the Paris prosecutor's office had been tracking him for several weeks before the arrest. He was caught just as he was about to publish a new batch of stolen data.
🎯 What did he hack?
HexDex's alleged targets are striking in both their number and sensitivity:
- The French Education Ministry — student and staff data
- Dozens of sports federations — sailing, athletics, motor sport, gymnastics, skiing, rugby league, aikido, university sport, mountain climbing, parasport
- The SIA (Système d'information sur les armes) — France's national registry of legal firearms owners. Particularly sensitive: similar data had previously been used to organise burglaries and armed robberies
- If you're a member of a French sports federation, your data may have been exposed
- If you have children in French schools, their data may have been stolen
- Change your passwords on these services as a precaution
- Enable two-factor authentication (2FA) on your important accounts
📅 Timeline of events
- 19 Dec 2025Attacks beginInvestigators link HexDex to hacks from this date onwards
- Jan 2026Targets escalateHack of SIA — national firearms registry — and numerous sports federations
- 21 Apr 2026Arrest in VendéeArrested at home just as he was about to publish new stolen data
- 22 Apr 2026Official announcementParis prosecutor confirms the arrest. His Darkforum account is seized
- 23 Apr 2026Formally chargedHexDex is charged and placed in pre-trial detention
🔍 What this reveals about cybercrime in France
The HexDex case illustrates a worrying trend: very young, often self-taught hackers capable of targeting sensitive public institutions from their bedrooms.
This isn't an isolated case. In late January 2026, two suspected hackers were charged for attacks on school networks in La Réunion, Reims and Clermont-Ferrand — the youngest was 17 years old. In December 2025, a 22-year-old was imprisoned for breaking into French Interior Ministry servers.
- HexDex has been arrested and charged — he is now in pre-trial detention
- Over 100 hacks are attributed to him in just 4 months
- His targets include sensitive data belonging to millions of French citizens
- French cybercrime authorities acted swiftly and effectively
🛡️ How to protect yourself after a data breach
- Change your passwords on potentially affected services
- Enable two-factor authentication (2FA) on your email and important accounts
- Check if your email was compromised at haveibeenpwned.com (free)
- Monitor your bank statements — stolen data can be used for fraud
- Install an antivirus — Bitdefender detects attempts to exploit stolen data
Think you might be affected by this breach?
Describe your situation to CyberGuard — it'll guide you step by step, for free.
🤖 Talk to CyberGuard →