Leak at Nord Emploi

On 26 February 2025, Nord Emploi — the Département du Nord's platform for supporting RSA (Revenu de Solidarité Active) benefit recipients in their return to employment — was reported to have suffered a data leak exposing the records of its beneficiaries. The breach was indexed by the bonjourlafuite / FrenchBreaches leak-tracking service, which lists roughly 200,000 affected accounts.

Because Nord Emploi handles the full social-insertion dossier of each beneficiary, the exposed records went well beyond basic contact details and covered sensitive welfare-accompaniment information. Reported exposed data categories include:

• Identity and contact data: last name, first name, phone number, postal address
• Benefits identifiers: allocataire (claimant) number, referring organisation, RSA & CAF form
• Case-management data: rights opening date, deregistration date, personalised project, support arrangements and notifications
• Sensitive profiling: illiteracy status, ability to use computer tools, childcare solution, support from a professional network
• Career data: CV, number of applications, professional and associative experience, training, skills, targeted occupations, interests, language certifications, office-tool proficiency, driving licence

The exposure of this combination of identity, benefits and personal-vulnerability data exposes affected individuals — an already economically and socially fragile population — to a heightened risk of impersonation, social-engineering and benefits fraud. The specific attack vector was not publicly detailed, and no official remediation statement tied to this disclosure has been confirmed; the Nord Emploi platform itself was subsequently announced to be shutting down in 2026.