Leak at France Travail

On 1 December 2025, France Travail — France's public employment agency — and the Union nationale des missions locales jointly disclosed a cyberattack that exposed the personal data of roughly 1.6 million young people supported by the Missions Locales network for youth employment.

According to initial investigations, attackers compromised the account of an agent responsible for account management (RGC) at a local mission. Using the rights of that hijacked account, they created two additional accounts through the ProConnect identity service, then used those to reach professional tools holding the case files of accompanied young people. The data of the affected individuals was deemed "susceptible to being disclosed."

The exposed data categories include:

• First and last name
• Date of birth
• Social security number
• France Travail identifier
• Email and postal addresses
• Telephone numbers

No passwords or banking information were extracted, according to the two organisations. This marks the fourth cyber incident affecting France Travail in two years. In response, the access was cut and reinforced security measures were deployed, including mandatory security-awareness training renewed every six months for staff of partner organisations as a condition of access to the information system. Both networks urged affected individuals to remain vigilant against phishing and identity-fraud attempts.