ENKR

France Travail jobseeker data breach

Add to my breach check

Made public · 43,000,000 people, potentially

What leaked7

Hard to replace

  • Mobile number
  • Home or delivery address
  • Email address
  • Username

Permanent

  • National ID or tax number
  • Date of birth
  • Full name
  • National ID or tax numberFrench social security number
  • Mobile numberphone numbers
  • UsernameFrance Travail identifier

To-dos4 · about 50 min in all

  1. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  2. Turn on instant transaction alertsabout 5 minHelps you notice: scam calls
  3. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home
  4. Use an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: SMS code theft

What happened next12 events

  1. UndetectedNone on record
  2. Response 6 eventsNo individual notice on record · show events
  3. RemedyNone on record
  4. Penalty 5 eventsFine €5M · show events
  5. Disputes 1 eventOngoing · Back to latest

Disputes: 1 event

Back to latest
  1. Three suspects arrested on 17 March were placed under formal investigation and in pre-trial detention · fraudulent system access, data extraction, fraud, money laundering, organised gang
Company
France Travail
Made public
Notice
Leak confirmed
Affected
43,000,000 people, potentially · registered with France Travail or Pôle emploi in the past 20 years, or holding a candidate account on francetravail.fr; France Travail notice

How the facts developed

  1. CNIL decision: the attackers accessed data on everyone registered or registered in the past 20 years and on candidate-account holders, but not the full jobseeker files that may contain health data
  2. France Travail announced that data on potentially 43 million people had been extracted using accounts of Cap emploi advisers; passwords and bank details not affected

Sources