France Travail Fined €5 Million by CNIL for Data Security Failures Leading to Massive Breach Affecting 36.8 Million Jobseekers
data_breachcybersecurityfineCNILFrance_Travailpersonal_dataunemploymenthackingdata_protectionprivacy
In January 2026, the CNIL (France's data protection authority) imposed a €5 million fine on France Travail for security shortcomings that enabled the theft of personal data belonging to 36.8 million unemployed individuals. The penalty was justified by the lack of adequate protective measures, which facilitated the exfiltration of information by hackers. No additional technical details (such as the attack method or types of exposed data) were provided.