France
FRA
Pôle emploi (now France Travail): 10M records exposed via contractor Majorel in MOVEit campaign
In August 2023 Pôle emploi disclosed that a contractor’s system was breached, exposing personal data of around 10 million people. Infosecurity identified the compromised provider as Majorel and linked the incident to the MOVEit zero‑day campaign attributed to Cl0p. The agency said benefits and support services were unaffected.
30
Estimated severity
30 / 100
84
Source reliability
84 / 100
Approximate Date
23/08/2023
Targeted Company
FRANCE TRAVAIL
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
MAJOREL (Third-party service provider)
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
France
Affected countries
France
Impacted regions
France · France
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
No information
Affected sectors
Government & Public Administration
Affected departments
No information
Attack Profile
Attack types
Zero-day exploitationExploitation of vulnerabilityData exfiltrationData breachThird-party or partner compromise
Attributed threat actors
CLOP
Sources
Incident Sources
pole-emploi.orghttps://www.pole-emploi.org/accueil/communiques/un-prestataire-de-pole-emploi-victime-dun-acte-de-cyber-malveillance.html?type=articleinfosecurity-magazine.comhttps://www.infosecurity-magazine.com/news/sensitive-data-10m-frenchhelpnetsecurity.comhttps://www.helpnetsecurity.com/2024/03/18/france-travail-data-breachbleepingcomputer.comhttps://www.bleepingcomputer.com/news/security/data-breach-at-french-govt-agency-exposes-info-of-10-million-people/