Young People’s Data at Risk in Cyberattack on French Government Contractor

In a concerning development, France’s Ministry of Labour and Employment has disclosed a cyberattack on a contractor serving its Local Missions network, which helps young people find employment and training. The breach, suspected to have occurred on the night of October 23, may have compromised personal data of individuals aged 16 to 25 who were registered with the ministry’s support programmes.

The Ministry stated that while its own Local Missions system remains secure, data held by the affected contractor could be at risk. The compromised information is thought to include full names, dates of birth, nationality, contact details, and other personal identifiers. Fortunately, financial data, including bank details, social security numbers, and identity documents, have not been affected by the breach.

Investigations are ongoing, and French authorities have been alerted, including the privacy regulator CNIL and cybersecurity agency ANSSI. A formal complaint has also been filed with judicial authorities, and measures to bolster information security are being expedited.

Those potentially impacted are being advised to remain vigilant against phishing attacks and identity theft attempts. The ministry has cautioned young people and their families to avoid sharing sensitive information, such as passwords or bank details, in response to any unsolicited messages.

With the investigation continuing, the ministry is working to notify all affected individuals and, where applicable, their legal guardians. This breach underscores the critical importance of securing sensitive data, especially for vulnerable groups such as young jobseekers.