Join on WhatsApp
Join on Telegram
Rabat – The personal information of around ten million job seekers has been illicitly offered for sale on the dark web after a data breach at Pole Emploi, the French government employment agency.
In a shocking revelation this week, converging French media reports indicated that the French government employment agency had fallen victim to a cyberattack that compromised the personal information of 100 million job seekers.
Cybersecurity experts are warning individuals to remain vigilant about potential identity theft and fraud, French media reports.
The breach, uncovered by renowned cybersecurity experts, highlights the alarming vulnerability of personal data in the digital age. According to Damien Bancal, a cybersecurity specialist from Zataz.com, a notorious hacker with a reputation for selling hacked databases listed a batch of data on August 8.
The database was reportedly dated 2022 and contained information from approximately 10.2 million users. The hacker set a price of $900 for the stolen data and even provided samples to attract potential buyers.
Clement Domingo, known by his online moniker @SaxX, also corroborated the illegal sale of the data on a hacker forum. Domingo, a respected figure in the cybersecurity field, noted that the database was initially discovered on August 8, with an updated version featuring more comprehensive information becoming available on the 21st.
Pole Emploi issued a cautionary statement to its registered job seekers, advising them to exercise caution due to “an act of cyber malevolence” directed at one of its service providers, Majorel.
The breach prompted an immediate investigation by the cybercrime division of the Paris prosecutor’s office. The inquiry is focused on charges of fraudulent entry and maintenance within an automated data processing system.
Read also: Morocco’s Mostafa Rabii: Cyberthreat Calls for ‘Concrete’ Transnational Cooperation
Pole Emploi clarified that the leaked data pertained to individuals who registered in February 2022 or those who had ceased registration within the past 12 months, potentially impacting up to 10 million people.
The compromised data primarily included names, surnames, and NIR (Social Security numbers). The agency reassured the public that more sensitive information such as email addresses, phone numbers, and bank details remained secure.
The incident appears to be connected to a larger-scale cyber attack campaign that occurred in May, affecting numerous organizations globally.
Clement Domingo highlighted that the cyberattack exploited vulnerabilities in software used by Pôle emploi’s service provider, Majorel. This attack, attributed to the Clop group, targeted over 500 organizations across the world, including prominent financial institutions like ING, Deutsche Bank, and Commerzbank.
