Cyberattack Claim Targets French Family Benefits Agency (CAF) Amid Hacker’s Escalating Threats A hacker known as Indra, who previously claimed responsibility for a cyberattack on France’s Interior Ministry, has now alleged a breach of the Caisse d’Allocations Familiales (CAF), the national family benefits agency. In a post on the cybercriminal forum Breachforums late yesterday, the hacker asserted access to 15 GB of data—reportedly containing 22 million lines of personal information on nearly 4 million beneficiaries. The leaked files, reviewed by BFMTV, include names, birthdates, email addresses, and phone numbers of individuals registered with the CAF between September 2022 and November 2025. Indra framed the attack as a "Christmas gift to France." The CAF swiftly denied the claims, stating that no intrusion or vulnerability had been detected in its systems. In an official response, the agency insisted its infrastructure remains secure and that the exposed data did not originate from its own databases. Instead, the CAF suggested the information may have been sourced from other public services with which it exchanges data, though it confirmed no technical breach of its information flows. Notably, the agency emphasized that no banking details or passwords were included in the leaked files. The same Indra account had earlier claimed responsibility for compromising the Interior Ministry’s systems, including sensitive police databases like the Traitement des Antécédents Judiciaires (TAJ) and the Fichier des Personnes Recherchées (FPR). That attack was reportedly executed by hijacking personal email accounts of ministry employees. Authorities arrested a 22-year-old suspect in connection with the Interior Ministry breach just hours before the CAF-related post appeared, though the origin of the CAF data remains unconfirmed. While the CAF maintains its systems were not breached, the authenticity of the leaked data raises questions about the broader security of interconnected public-sector networks. Investigations into both incidents are ongoing.