France Travail hit by cyberattack, compromising 63,000 agents' data

France Travail has been targeted by a cyberattack, resulting in the personal data of approximately 62,848 agents being put up for sale on a criminal forum. According to the data leak monitoring site French Breaches, the intrusion likely occurred last week through an employee's Microsoft account. While the unauthorized access was detected and blocked a few days after the data exfiltration, the information has already been listed for sale by an actor using the pseudonym ‘OxRune’.

The compromised database reportedly includes names, first names, professional email addresses, telephone numbers, job titles, assignment sites, and several internal identifiers. The leak includes a total of 100,738 landline and mobile numbers belonging to the more than 62,000 agents. These individuals are spread across 25 territorial and organizational entities, including regions such as Île-de-France, Bretagne, Occitanie, Nouvelle-Aquitaine, and Auvergne-Rhône-Alpes.

This incident marks the third cyberattack against the organization in less than three years. France Travail stated it is currently conducting the necessary verifications following the claim published on the dark web.