EEA Congress Data Breach Exposes 4.7K European Economics Academic Records

HEROIC's DarkHive system discovered the European Economic Association (EEA) Congress breach, exposing 4,670 records in July 2025. This French academic economics organization suffered a database compromise that revealed congress attendee and member email addresses, first and last names belonging to economists and academic researchers registered for this professional economics conference.

Why This Is Dangerous

Academic and professional conference organization breaches expose databases of verified experts and researchers whose institutional affiliations and professional identities are confirmed, making them high-value targets for spear phishing and business email compromise attacks. The relatively small but highly targeted nature of this breach means that virtually all records belong to verified economics professionals and academics whose institutional email addresses are linked to university and research institution systems. European academic researcher contact databases are specifically targeted for advanced persistent threat operations seeking access to research networks and institutional systems.

What Was Exposed

• Email Address
• First Name
• Last Name

Why This Matters

Economics researchers and academics whose data was exposed in the EEA Congress breach face targeted spear phishing attacks from criminal and state-sponsored actors who exploit confirmed professional identities to craft highly convincing impersonation schemes. Verified professional identity data from academic conferences is used to build detailed target profiles for advanced social engineering attacks targeting research institutions and policy organizations. While no passwords were exposed, the confirmed identity data enables account takeover attempts through password reset flows and social engineering directed at institutional IT systems.

How Database Breach Works

Professional conference and academic organization databases are targeted for their concentration of verified expert identity data from specific professional communities. Attackers exploit web application vulnerabilities in conference registration and member management systems to extract attendee and membership databases. The resulting professional identity records are used in targeted social engineering campaigns against research institutions and policy organizations, and incorporated into business email compromise operations targeting the academic and economics research community.

Check If You Are Affected

HEROIC offers a free identity scanner searching over 400 billion records including data from the European Economic Association Congress breach. Visit heroic.com to check if your information was exposed.