Data Breach at France Travail Affects 340,000 Job Seekers

A data breach at France Travail has compromised the personal information of 340,000 job seekers, prompting agency response and user alerts.

Key Points

  • • France Travail was hacked, affecting at least 340,000 job seekers.
  • • Personal data accessed includes names, addresses, phone numbers, and identifiers.
  • • Financial data and passwords were not compromised, but users should remain vigilant.
  • • A two-factor authentication system is being expedited to enhance security.

France Travail, the agency responsible for managing employment services in France, announced a significant data breach impacting at least 340,000 job seekers. The breach, which was discovered on July 12, 2025, uncovered unauthorized access to personal information, prompting an immediate shutdown of the agency's employment portal to mitigate further risks.

The compromised data primarily consists of names, addresses, email addresses, phone numbers, and identifiers linked to France Travail, but financial information and passwords were not involved in the breach. Despite the exclusion of more sensitive data, affected users have been cautioned to remain alert to potential phishing scams that may arise from this incident.

In response to the breach, France Travail has filed a complaint and reported the incident to CNIL, the French data protection authority, as part of its obligation to enhance transparency and accountability regarding data protection failures. Additionally, to strengthen its cybersecurity measures, the agency announced that it would accelerate the implementation of a two-factor authentication system, originally planned for rollout in October 2025.

This incident is particularly troubling as it follows another significant cyberattack in spring 2024 that compromised data from more than 40 million individuals associated with France Travail. The string of breaches underscores a troubling pattern regarding the agency's vulnerability to cyber threats and raises concerns about the adequacy of their current security measures amidst growing digital risks.