Data Breach at Retirement Insurance Affects 370,000 People

Banking information, retirement payments, and other benefits have not been compromised. What steps could be taken to further enhance the security of this data?

France Hit by Major Cyberattack

The French Pension Insurance recently faced a significant cyberattack. An official statement revealed that about 370,000 individuals were affected, targeting an online portal used by social action service providers for retirees.

Personal Data Breached

Compromised information primarily includes personal data: addresses, social security numbers, and approximate income levels. The National Old Age Insurance Fund (CNAV) noted that much of this data was outdated, some relating to deceased persons.

No Bank or Sensitive Data Exposed

However, the agency reassured its members by stating: “No banking details, payment data, retirement, career, or benefit information was compromised.”

Stolen Data for Sale on a Hacking Forum

Following the cyberattack, the stolen data appeared for sale on a hacking forum, which also listed information from recent breaches at Boulanger, Cultura, and Truffaut. The CNAV has apologized to those affected, taken the attacked portal offline, filed a complaint, and reported the incident to the National Commission on Informatics and Liberty (CNIL). Affected individuals will be notified.