Monitor this situation.
Unsubscribe anytime.
[SITUATION] · [ACTIVE] · [TECHNOLOGY]
6 clusters · 19 sources · 24 days · First seen · Last updated
French personal data breaches and cyberattacks
Overview
A series of significant data breaches and cyberattacks has compromised the personal information of millions of French citizens, including high-profile political and public figures. Initially, a pirate search engine emerged online, allowing users to access sensitive details such as social security numbers, home addresses, and banking information. This platform reportedly aggregated data from multiple previous breaches involving companies like Free, SFR, and Auchan, as well as political parties. Exposed individuals included 2027 presidential candidates Jean-Luc Mélenchon, Édouard Philippe, and Marine Le Pen, alongside celebrities like Kylian Mbappé. Recent incidents have intensified the scale of the crisis. A major cyberattack on the retailer Le Slip français resulted in the theft of data belonging to 1.5 million customers, including the personal information of 25 out of 36 members of the French government. Notable victims include Prime Minister Sébastien Lecornu, whose phone number was leaked, as well as officials Anne Le Hénanff and Catherine Vautrin. In October 2026, France Travail was targeted by a cyberattack that compromised the personal data of approximately 62,848 agents. An actor using the pseudonym ‘OxRune’ listed the data for sale on a criminal forum, including names, professional email addresses, job titles, and over 100,000 telephone numbers. This marks the third cyberattack against the organization in less than three years. Authorities have warned that approximately 80% of French citizens now have personal data for sale on the darknet. This surge in cybercrime includes claims of stolen files belonging to 1.2 million beneficiaries of the VACAF service managed by the Caisses d'allocations familiales (CAF). In response to the rise of illegal data search engines, French investigators dismantled the platform Stryxx (formerly Reacher), leading to the arrest of three 17-year-old administrators. Further escalations include a claim by hacker Syrv4x that 10.3 million records were stolen from technical services company Solutions30.
Entities
France Travail · France · Renaissance · Surfshark · Check Point Software Technologies
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 3 SOURCES] Approximately 80% of French citizens have their data for sale on the darknet to varying degrees.
- [● 3 SOURCES] France had 43.4 million compromised accounts in the first half of 2026.
- [● 2 SOURCES] A hacker known as OxRune claimed to have stolen data belonging to 62,848 France Travail agents.
- [● 2 SOURCES] The France Travail breach was allegedly executed via an employee's Microsoft account.
- [○ 1 SOURCE] Authorities dismantled a data resale platform known as Stryxx (formerly Reacher) and arrested three administrators.
- [○ 1 SOURCE] The dismantled platform claimed to have 730 million indexed data lines and over 3 million queries.
- [○ 1 SOURCE] The three arrested suspects are adolescents aged 17.
- [○ 1 SOURCE] A hacker put approximately 1.2 million VACAF (CAF) beneficiary files up for sale.
Timeline
-
[TECHNOLOGY] 2 sourcesFrance data breaches target political parties and vehicle registrations
A hacker known as ChimeraZ has claimed responsibility for leaking databases in France, including 905,000 vehicle registrations and sensitive contact information belonging to La France insoumise militants.
-
[TECHNOLOGY] 3 sourcesSolutions30 faces alleged data breach involving 10 million records
A hacker claims to have stolen 34 GB of data from French technical services firm Solutions30, involving over 10 million alleged records including personal contact and subscription details.
-
[TECHNOLOGY] 4 sourcesFrance Travail hit by cyberattack, compromising 63,000 agents' data
France Travail suffered a cyberattack where data for nearly 63,000 agents, including contact details and internal identifiers, was put up for sale on a dark web forum.
-
[CRIME] 10 sourcesFrance faces surge in cyberattacks and large-scale data breaches
French authorities warn that 80% of citizens have data for sale on the darknet following major breaches at CAF and France Travail, and the dismantling of a massive illegal data search platform.
-
[TECHNOLOGY] 5 sourcesFrench government officials' data leaked in major cyberattack
A cyberattack on Le Slip français has leaked the personal data of 1.5 million customers, including sensitive information belonging to 25 members of the French government.
-
[TECHNOLOGY] 2 sourcesData breach exposes personal details of French politicians and celebrities
A pirate search engine has emerged in France, exposing the personal data, phone numbers, and banking details of millions of citizens, including top political candidates and celebrities.
Sources
actu17.fr · bbox-mag.fr · bienpublic.com · clubic.com · entrevue.fr · esteval.fr · estrepublicain.fr · frandroid.com · generation-nt.com · journalducoin.com · la-croix.com · lecanardenchaine.fr · ledauphine.com · lejsl.com · netcost-security.fr · planet.fr · republicain-lorrain.fr · sudouest.fr · vosgesmatin.fr
This summary has been updated 5 times: see revision history