France faces surge in cyberattacks and large-scale data breaches

cyberattack data breach darknet cybercrime personal data

France is facing a significant surge in cybercrime, with authorities warning that approximately 80% of the population has personal data for sale on the darknet. This warning comes amid several high-profile breaches of public institutions.

In recent incidents, a hacker claimed to have stolen files belonging to 1.2 million beneficiaries of the VACAF service, managed by the Caisses d'allocations familiales (CAF). Additionally, a hacker using the pseudonym OxRune targeted France Travail, allegedly exfiltrating the professional contact details of over 62,000 agents and partners through a compromised Microsoft account.

In response to the proliferation of illegal data search engines known as ‘look up’ sites, French investigators successfully dismantled the platform Stryxx (formerly Reacher). The operation led to the arrest of three 17-year-old administrators. The platform was reportedly used to index hundreds of millions of data lines, allowing users to search for sensitive information such as phone numbers and bank details.

Cybersecurity data indicates that France remains one of the most targeted European nations, with 43.4 million accounts compromised in the first half of 2026 alone.

Entities

André Petillot · Caisses d'allocations familiales · Check Point Software Technologies · France · France Travail · French Gendarmerie · Gendarmerie Nationale · Office français anticriminalité · Surfshark

Claims

What the coverage asserts, and how many sources carry each claim.

[○ 1 SOURCE] The three arrested suspects are adolescents aged 17. www.la-croix.com
[○ 1 SOURCE] The dismantled platform claimed to have 730 million indexed data lines and over 3 million queries. www.la-croix.com
[● 3 SOURCES] Approximately 80% of French citizens have their data for sale on the darknet to varying degrees. www.lejsl.com · www.republicain-lorrain.fr · www.ledauphine.com
[○ 1 SOURCE] Authorities dismantled a data resale platform known as Stryxx (formerly Reacher) and arrested three administrators. www.la-croix.com
[● 3 SOURCES] France had 43.4 million compromised accounts in the first half of 2026. www.lejsl.com · www.republicain-lorrain.fr · www.ledauphine.com
[● 2 SOURCES] A hacker known as OxRune claimed to have stolen data belonging to 62,848 France Travail agents. www.generation-nt.com · www.planet.fr
[○ 1 SOURCE] A hacker put approximately 1.2 million VACAF (CAF) beneficiary files up for sale. www.frandroid.com
[● 2 SOURCES] The France Travail breach was allegedly executed via an employee's Microsoft account. www.generation-nt.com · www.planet.fr