France Travail, the French employment agency, experienced a data breach affecting 340,000 users. Personal data, including names, addresses, phone numbers, and jobseeker statuses, were exposed. The breach was caused by an infostealer malware compromising a user account linked to a training organization. The agency assured that passwords and bank details were not affected but warned users about phishing risks. This is the second breach in two years for France Travail.

France Travail suffered a cyberattack attributed to the Russian cybercriminal group Stormous, resulting in the theft of personal data from 31,000 job seekers. The attackers exploited infostealer malware installed on victims' personal computers to harvest login credentials, enabling unauthorized access to France Travail’s systems. Compromised data includes names, dates of birth, addresses, phone numbers, emails, passwords, ID cards, bank statements, tax notices, social security records, and professional histories (contracts, skills, training). While France Travail acknowledges the breach, it cannot confirm the full scope of exposed data or the exact number of affected individuals. The stolen information poses risks of phishing, identity theft, and financial fraud. This incident follows prior breaches in July 2025 (340,000 records) and March 2024 (43 million records), highlighting persistent vulnerabilities in the agency’s security posture. France Travail advises users to strengthen password security but has not mandated password resets.

The federal unemployment registration and financial help organisation in France, Pôle emploi, has suffered a data breach that compromised the personal information of 10 million people. The exposed information includes full names and social security numbers, while email addresses, phone numbers, passwords, and banking data have not been affected by this data leak. Job searchers are advised to feel secure using their passwords to log into the online employment portal at "pole-employment.fr" because the agency has made it clear that the occurrence has no effect on its financial aid programmes. The organisation has also established a special phone support line to address any queries or worries that anyone who were exposed might have regarding the occurrence.