France fines unemployment agency €5 million over data breach

France Travail (formerly Pôle Emploi) suffered a large-scale data breach in early 2024 in which attackers used social engineering to compromise CAP EMPLOI advisers' accounts and exfiltrate personal data for up to 43 million people; CNIL fined the agency €5 million and ordered documented corrective measures with daily penalties for noncompliance. The breach reportedly did not include bank details or complete job-seeker files, and the report notes a separate August 2023 incident that exposed roughly 10 million individuals' names and social security numbers.