[REVISION HISTORY]

French personal data breaches and cyberattacks

Updated 5 times since CLSTR started tracking revisions of this situation.

What changed

2026-10-13 22:07 UTC → 2026-10-26 07:35 UTC · added ~~removed~~

A series of significant data breaches and cyberattacks has compromised the personal information of millions of French citizens, including high-profile political and public figures. Initially, a pirate search engine emerged online, allowing users to access sensitive details such as social security numbers, home addresses, and banking information. This platform reportedly aggregated data from multiple previous breaches involving companies like Free, SFR, and Auchan, as well as political parties. Exposed individuals included 2027 presidential candidates Jean-Luc Mélenchon, Édouard Philippe, and Marine Le Pen, alongside celebrities like Kylian Mbappé. Recent incidents have intensified the scale of the crisis. A major cyberattack on the retailer Le Slip français resulted in the theft of data belonging to 1.5 million customers, including the personal information of 25 out of 36 members of the French government. Notable victims include Prime Minister Sébastien Lecornu, whose phone number was leaked, as well as officials Anne Le Hénanff and Catherine Vautrin. In October 2026, France Travail was targeted by a cyberattack that compromised the personal data of approximately 62,848 agents. An actor using the pseudonym ‘OxRune’ listed the data for sale on a criminal forum, including names, professional email addresses, job titles, and over 100,000 telephone numbers. This marks the third cyberattack against the organization in less than three years. Authorities have warned that approximately 80% of French citizens now have personal data for sale on the darknet. This surge in cybercrime includes claims of stolen files belonging to 1.2 million beneficiaries of the VACAF service managed by the Caisses d'allocations familiales (CAF). In response to the rise of illegal data search engines, French investigators dismantled the platform Stryxx (formerly Reacher), leading to the arrest of three 17-year-old administrators. Further escalations include a claim by hacker Syrv4x that 10.3 million records were stolen from technical services company Solutions30.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.