Urssaf Hit by Major Cyberattack Affecting 1.2 Million in France France’s social charges body, Urssaf, has disclosed a significant cyberattack targeting the Pajemploi service, which facilitates payments to childminders. The breach, detected on November 14, may have exposed the personal data of up to 1.2 million employees of private employers using the platform. Compromised data includes: - Full names - Dates and places of birth - Addresses - Social security numbers - Bank names - Pajemploi and accreditation numbers Urssaf confirmed that bank account details (IBANs), email addresses, phone numbers, and login passwords were not accessed. The agency acted swiftly to contain the breach, reporting the incident to France’s data protection authority (CNIL), the national cybersecurity agency, and filing a criminal complaint. While the Pajemploi system remains operational, Urssaf warned of potential phishing scams as hackers may sell the stolen data to fraudsters. Scammers could impersonate officials, using the leaked information to deceive victims into urgent, fraudulent actions. Affected individuals will be contacted directly by Urssaf, which has set up a dedicated email ([email protected]) and phone line (0809 541 896) for inquiries. The agency continues to investigate the breach and reinforce its security measures.