800,000 records in Adecco data leak

On 4 January 2026, Adecco — the French arm of the global staffing and temporary-employment group — was reported to be the subject of a data leak affecting candidates who had submitted a CV or created a profile. A threat actor advertised a database of roughly 800,000 records on a cybercrime marketplace, said to have been exfiltrated from an internal Adecco tool around 20–22 December 2025.

The dataset included some 750,000 CVs and exposed a broad range of personal information tied to jobseekers and temporary workers. Reported categories include:

• Full names
• Email addresses and phone numbers
• Postal details (region, city, postal code)
• Professional sector and work history, skills and languages from CVs
• In some samples, dates of birth and account metadata

Adecco acknowledged being the target of attempted data extractions affecting its candidates and temporary workers, while stopping short of confirming the full scope of stolen data. The company notified affected individuals on a precautionary basis, advised them to guard against fraud, reported the matter to France's data-protection regulator (CNIL) and filed a complaint with the public prosecutor.

The incident remains under investigation, and reporting noted ambiguity over whether the data was freshly harvested or partly recycled from an earlier compromise. Adecco had previously suffered a separate breach traced to 2022, in which a junior intern's credentials were handed to criminals; that case concluded with a prison sentence in 2025 and is distinct from this January 2026 leak.