CNIL Fine on France Travail After Hack Exposes 20 Years of Job Seekers’ Personal Data
ID: 87b87173-117d-5a3e-869e-5b59976a0c78
STIX ID: report--87b87173-117d-5a3e-869e-5b59976a0c78
Feed Name: The Cyber Express
Threat Score
On 22 January 2026 the CNIL fined France Travail €5 million after a 2024 cyberattack in which attackers used social engineering to compromise CAP EMPLOI adviser accounts and accessed 20 years of job-seeker records (national insurance numbers, emails, postal addresses and phone numbers); the regulator cited weak authentication, poor logging/monitoring, overbroad permissions and failure to implement known security measures, and ordered corrective actions with potential daily penalties for noncompliance.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.