Missions Locales: more than 500,000 young people exposed following a cyberattack

On 1 April 2026, Missions Locales — France's public-service network helping young people with employment, training, and social support — was hit by a data leak in which more than 506,000 youth profiles were offered for sale on dark web forums.

The exposed records were described as particularly sensitive, combining identity data with detailed personal and social context. The categories reported as compromised include:

• Full identities (first name, surname, date of birth)
• Contact details (email, phone number, postal address)
• Educational and professional background
• Social-situation data such as housing, mobility, family situation, and the support or administrative-aid programs the person was enrolled in

The breach came only a few months after a December 2025 alert in which the personal data of roughly 1.6 million young people tracked by the network and France Travail was put at risk. A direct link between the two events had not been confirmed, but the recurrence underscored how databases of social-support beneficiaries have become prime targets.

At the time of reporting, the attack vector had not been publicly disclosed and the data remained actively offered for sale, so the incident is treated as ongoing. The combination of identity, contact, and social-vulnerability information raises a heightened risk of targeted phishing, identity theft, and fraud exploiting victims' personal circumstances.