Massive Data Leak Exposes Over 1 Million French Employment Records Hackers operating under the aliases misere and ChimeraZ claim to have stolen more than 1 million sensitive records from France Travail’s employment-related applications, including HR, mobility, and workplace health systems. The breach, linked to platforms AKAOLIFE and FILDIRECT-RH, involves nearly 60GB of data across 39 databases and over 10,000 source files. The leaked data includes: - 966,816 HR files and 1,003,047 professional mobility records - 38,138 workplace health monitoring files and 3,747 disability-related documents - 26,684 accounts with plaintext passwords, alongside application code, security keys, and Windows login credentials Exposed details extend beyond basic contact information, revealing French social security numbers, employee IDs, job histories, internal mobility requests, and recruiter comments enough to craft highly convincing phishing scams. The breach also raises concerns about further system exploitation due to exposed configuration files. Both hackers have been active in recent incidents: ChimeraZ was linked to a breach at optical retailer Krys, while misere was tied to a leak of 650,000 messages from France’s Tchap secure messaging platform. The primary risk for affected workers is impersonation, with attackers potentially posing as HR, recruiters, or public service officials to extract sensitive documents or credentials. The inclusion of plaintext passwords compounds the threat, particularly for those who reuse passwords across services.