ENKR

France Travail jobseeker data breach

Add to my breach check

Made public · 43,000,000 people, potentially

What leaked7

Hard to replace

  • Mobile number
  • Home or delivery address
  • Email address
  • Username

Permanent

  • National ID or tax number
  • Date of birth
  • Full name
  • National ID or tax numberFrench social security number
  • Mobile numberphone numbers
  • UsernameFrance Travail identifier

To-dos4 · about 50 min in all

  1. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  2. Turn on instant transaction alertsabout 5 minHelps you notice: scam calls
  3. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home
  4. Use an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: SMS code theft

What happened next12 events

  1. UndetectedNone on record
  2. Response 6 eventsNo individual notice on record · Back to latest
  3. RemedyNone on record
  4. Penalty 5 eventsFine €5M · show events
  5. Disputes 1 eventOngoing · show events

Response: 6 events

Back to latest
  1. Additional access protection for partner (Cap emploi) logins announced
  2. Dedicated information line announced on the 39 49 phone service
  3. France Travail apologised to the people identified and said it would inform them by personal account or email
  4. France Travail filed a criminal complaint with the judicial authorities
  5. Press release: personal data of potentially 43 million people extracted; passwords and bank details not affected
  6. France Travail and Cap emploi notified the CNIL of an intrusion into their information systems
Company
France Travail
Made public
Notice
Leak confirmed
Affected
43,000,000 people, potentially · registered with France Travail or Pôle emploi in the past 20 years, or holding a candidate account on francetravail.fr; France Travail notice

How the facts developed

  1. CNIL decision: the attackers accessed data on everyone registered or registered in the past 20 years and on candidate-account holders, but not the full jobseeker files that may contain health data
  2. France Travail announced that data on potentially 43 million people had been extracted using accounts of Cap emploi advisers; passwords and bank details not affected

Sources