{ "type": "bundle", "id": "bundle--3ac8e984-e992-575f-8270-dc60b2de4ec1", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--6eb5a5b3-79f2-52dc-8a83-d4db5666d255", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "org:3382fb26-cb6f-4619-afa1-7a305e6eabb4", "name": "France Travail", "identity_class": "organization" }, { "type": "identity", "spec_version": "2.1", "id": "identity--b700ac0d-1669-5d50-8fa3-54ef9cbf1ba9", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "org:b96d401c-2026-49c8-8e52-74e36c298709", "name": "Cap emploi network", "identity_class": "organization" }, { "type": "incident", "spec_version": "2.1", "id": "incident--522280e3-979d-51cf-8515-b93ab237dab0", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "inc:26e2d9e7-1a92-4d76-830f-80d0d7fcf394", "name": "First-quarter 2024 France Travail account compromise" }, { "type": "incident", "spec_version": "2.1", "id": "incident--ff53d3a6-3e37-5079-8218-e1e0f0578b3c", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "brh:468a3146-aa56-49a0-941d-8bd5ff31c458", "name": "France Travail job-seeker data breach" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--234509e7-c102-5f9f-8094-b0273f80afa1", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "clm:2304b4c3-a9b6-49f4-b9b2-f3fd1ccab9e1", "relationship_type": "affected-organization", "source_ref": "incident--522280e3-979d-51cf-8515-b93ab237dab0", "target_ref": "identity--b700ac0d-1669-5d50-8fa3-54ef9cbf1ba9", "confidence": 100, "external_references": [ { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/en/data-breach-5million-fine-france-travail", "external_id": "cit:6ef9ea02-cf0f-4478-952d-cb06d0e83949", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:085521c9a191ff78088a4a4f2212eba9b13e979ac16ceba1ed2f0e6ad471f06a" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--330cd9c6-a351-5c70-8822-eeb927251793", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "clm:10d9ac6f-5cd9-4fc1-b8a5-6c83c8d3018b", "relationship_type": "affected-organization", "source_ref": "x-ally-legal-proceeding--4576b953-89ec-5bf1-8831-9deccfd9c5db", "target_ref": "identity--6eb5a5b3-79f2-52dc-8a83-d4db5666d255", "confidence": 100, "external_references": [ { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/en/data-breach-5million-fine-france-travail", "external_id": "cit:0022fa35-b129-4dce-9096-01cf2626ea38", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:085521c9a191ff78088a4a4f2212eba9b13e979ac16ceba1ed2f0e6ad471f06a" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8d72b929-6a48-5e6c-8aba-2616ad30d4d0", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "clm:ae1e0853-108c-425c-8a31-cabc189a796c", "relationship_type": "resulted-in", "source_ref": "incident--522280e3-979d-51cf-8515-b93ab237dab0", "target_ref": "x-ally-data-exposure--36bb2b27-16a3-5816-8230-6bb3229504ca", "confidence": 100, "external_references": [ { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/en/data-breach-5million-fine-france-travail", "external_id": "cit:2d74bc50-adc8-4238-a42a-6e96b7969ce1", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:085521c9a191ff78088a4a4f2212eba9b13e979ac16ceba1ed2f0e6ad471f06a" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--95420b7f-1fdb-5156-8ec6-9dcf8ae19237", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "clm:70e2f096-972b-4429-add6-ca19c0278ebb", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--36bb2b27-16a3-5816-8230-6bb3229504ca", "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231", "confidence": 100, "external_references": [ { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/en/data-breach-5million-fine-france-travail", "external_id": "cit:3bb9e098-cebd-442d-95a5-22d763fc4e00", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:085521c9a191ff78088a4a4f2212eba9b13e979ac16ceba1ed2f0e6ad471f06a" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--98577aa9-9cad-5ef3-87e3-f133132a3d10", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "clm:d95fa9ee-dd68-45fd-bbca-54eb8b62fabd", "relationship_type": "resulted-in", "source_ref": "incident--522280e3-979d-51cf-8515-b93ab237dab0", "target_ref": "x-ally-legal-proceeding--4576b953-89ec-5bf1-8831-9deccfd9c5db", "confidence": 100, "external_references": [ { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/en/data-breach-5million-fine-france-travail", "external_id": "cit:23152fef-a883-4104-b67f-b57d1b751096", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:085521c9a191ff78088a4a4f2212eba9b13e979ac16ceba1ed2f0e6ad471f06a" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b123e67d-cd7d-55f8-8346-204f20ede322", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "clm:b85e6c85-cbf2-4324-80e4-9cf648a64bc6", "relationship_type": "affected-organization", "source_ref": "incident--522280e3-979d-51cf-8515-b93ab237dab0", "target_ref": "identity--6eb5a5b3-79f2-52dc-8a83-d4db5666d255", "confidence": 100, "external_references": [ { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/en/data-breach-5million-fine-france-travail", "external_id": "cit:ecdd48d4-5929-44a1-8e4c-76d5003c6bcc", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:085521c9a191ff78088a4a4f2212eba9b13e979ac16ceba1ed2f0e6ad471f06a" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c798af6d-cfe9-51d7-8319-8d92425eecf6", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "clm:b678d66a-5b22-4be7-aab4-bba339a3fa59", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--36bb2b27-16a3-5816-8230-6bb3229504ca", "target_ref": "x-ally-data-category--8d61e479-4403-5ccf-8301-fc8eecd71836", "confidence": 100, "external_references": [ { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/fr/france-travail-la-cnil-enquete-sur-la-fuite-de-donnees-et-donne-des-conseils-pour-se-proteger", "external_id": "cit:84e86a94-91b7-4391-b335-329580d57e9e", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:ccced9c5ea3229d2c7245adaccbae52d4b6a444a8ffeada56f5540db94549b85" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cebd6aa5-b87f-50d5-80ac-1699a4863cff", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "clm:cc5e4d40-e842-4981-b1e4-0260000e1fa1", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--36bb2b27-16a3-5816-8230-6bb3229504ca", "target_ref": "x-ally-data-category--ab430a0e-23bc-5177-814b-26f716196ca0", "confidence": 100, "external_references": [ { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/en/data-breach-5million-fine-france-travail", "external_id": "cit:c0700b81-fb37-4fc5-8fbd-56c18ae20be1", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:085521c9a191ff78088a4a4f2212eba9b13e979ac16ceba1ed2f0e6ad471f06a" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--daa537d7-808e-5219-8492-a14074867ebd", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "clm:ee763750-181b-444a-9373-5a7956d88b8a", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--36bb2b27-16a3-5816-8230-6bb3229504ca", "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07", "confidence": 100, "external_references": [ { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/fr/france-travail-la-cnil-enquete-sur-la-fuite-de-donnees-et-donne-des-conseils-pour-se-proteger", "external_id": "cit:2f46a514-9fb1-487f-8a34-fbcbfc29c062", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:ccced9c5ea3229d2c7245adaccbae52d4b6a444a8ffeada56f5540db94549b85" } ] }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--0395f893-10b8-54b6-8802-7451a755f096", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "clm:6f41dbe7-d28f-420e-ab73-c4059c64a188", "confidence": 100, "external_references": [ { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/en/data-breach-5million-fine-france-travail", "external_id": "cit:be379d11-b1f1-4c7b-adeb-357944d39433", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:085521c9a191ff78088a4a4f2212eba9b13e979ac16ceba1ed2f0e6ad471f06a" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The attackers hijacked Cap emploi adviser accounts and used them to access the France Travail information system in the first quarter of 2024." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--1749fd9a-80f1-5ade-8247-0c6a367729e4", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "clm:86b7d4ec-8567-4709-ae2b-da3f4972ed7d", "confidence": 100, "external_references": [ { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/en/data-breach-5million-fine-france-travail", "external_id": "cit:c9e21132-5cb4-4d32-a44f-54c926213f22", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:085521c9a191ff78088a4a4f2212eba9b13e979ac16ceba1ed2f0e6ad471f06a" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The CNIL found logging measures were inadequate for detecting abnormal behavior on the information system." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--28bda6be-e765-5bed-85ad-a4d5131c2398", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "clm:1ed21e93-91b0-4784-8165-b2e435528910", "confidence": 100, "external_references": [ { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/fr/france-travail-la-cnil-enquete-sur-la-fuite-de-donnees-et-donne-des-conseils-pour-se-proteger", "external_id": "cit:48bdcd95-d591-4e59-ae9b-fa11cb64acde", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:ccced9c5ea3229d2c7245adaccbae52d4b6a444a8ffeada56f5540db94549b85" }, { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/en/data-breach-5million-fine-france-travail", "external_id": "cit:bc630433-780f-4392-bdde-da34773cdedd", "x_ally_stance": "qualifies", "x_ally_snapshot_id": "snp:sha256:085521c9a191ff78088a4a4f2212eba9b13e979ac16ceba1ed2f0e6ad471f06a" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The CNIL's March 2024 information said passwords and bank details were not affected; the later enforcement summary also said complete job-seeker files, which may include health data, were not accessed." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--2a351aad-5a61-5b4d-85f6-2a043fe1c143", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "clm:27f725b6-70ff-4874-804a-5b1df971b345", "confidence": 100, "external_references": [ { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/en/data-breach-5million-fine-france-travail", "external_id": "cit:edbbc465-1595-4c8b-9886-1e179f99c6a9", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:085521c9a191ff78088a4a4f2212eba9b13e979ac16ceba1ed2f0e6ad471f06a" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-01-22" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--2b57562e-f9bc-51ad-887d-c2e5eddd9f2e", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "clm:71add351-a1aa-4c0e-939a-529c021487cb", "confidence": 100, "external_references": [ { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/fr/france-travail-la-cnil-enquete-sur-la-fuite-de-donnees-et-donne-des-conseils-pour-se-proteger", "external_id": "cit:13902275-0089-4dc0-967b-985e3447ebbc", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:ccced9c5ea3229d2c7245adaccbae52d4b6a444a8ffeada56f5540db94549b85" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2024-03-08" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--4ea45d8e-f846-5e8c-8ed1-b66a15cf34ee", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "clm:88e92f4c-0f56-415d-96c4-a0414320c796", "confidence": 90, "external_references": [ { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/fr/france-travail-la-cnil-enquete-sur-la-fuite-de-donnees-et-donne-des-conseils-pour-se-proteger", "external_id": "cit:ca86ff87-2a51-4305-9dea-b9702b1492ab", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:ccced9c5ea3229d2c7245adaccbae52d4b6a444a8ffeada56f5540db94549b85" } ], "x_ally_claim_object": { "kind": "value", "datatype": "integer", "value": 43000000, "unit": "individual", "approximate": true } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--6a944914-dac5-5570-8a36-fdce5cd387d7", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "clm:0ea28764-9855-4647-a65a-82004fb3296f", "confidence": 100, "external_references": [ { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/en/data-breach-5million-fine-france-travail", "external_id": "cit:e3272ec5-6696-46d1-87ba-889d75b6952d", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:085521c9a191ff78088a4a4f2212eba9b13e979ac16ceba1ed2f0e6ad471f06a" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The CNIL found Cap emploi adviser permissions were too broad and allowed access to people the advisers were not supporting, increasing the volume exposed to attackers." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--7522aaf6-e70a-5aba-8912-fdcc3feaecf8", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "clm:2fb8d012-000d-4d9a-832c-38fd343ed0b0", "confidence": 100, "external_references": [ { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/en/data-breach-5million-fine-france-travail", "external_id": "cit:df28ffbd-b4c7-4d86-ad02-4fd513f9f2c7", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:085521c9a191ff78088a4a4f2212eba9b13e979ac16ceba1ed2f0e6ad471f06a" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Social engineering was used to exploit trust or lack of awareness and take over Cap emploi adviser accounts; the source does not identify a more specific standardized technique." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--81514775-0094-5cca-8413-8b71410c08ff", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "clm:195d0ddf-68e9-43c4-8fdf-a94efbf48cea", "confidence": 100, "external_references": [ { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/en/data-breach-5million-fine-france-travail", "external_id": "cit:714485a2-b392-4c38-9540-11b255d797c1", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:085521c9a191ff78088a4a4f2212eba9b13e979ac16ceba1ed2f0e6ad471f06a" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The CNIL imposed a €5 million administrative fine on France Travail." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--d0a7d9a7-12ca-542f-842b-3abd580fe682", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "clm:af96c6be-beca-403e-964a-7495656a8533", "confidence": 100, "external_references": [ { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/en/data-breach-5million-fine-france-travail", "external_id": "cit:dddc28a5-4d89-4d65-8339-3ed71d9f6a2d", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:085521c9a191ff78088a4a4f2212eba9b13e979ac16ceba1ed2f0e6ad471f06a" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The CNIL found the authentication procedures used by Cap emploi advisers to access France Travail were not sufficiently robust." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--d9e7289a-d206-5e57-8d90-480169ba31dc", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "clm:b4d26b78-d501-472d-bf3e-0b04e0957c43", "confidence": 100, "external_references": [ { "source_name": "Commission nationale de l'informatique et des libertés", "url": "https://www.cnil.fr/en/data-breach-5million-fine-france-travail", "external_id": "cit:69eb665d-a5fa-433a-8b31-b47903a2abe0", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:085521c9a191ff78088a4a4f2212eba9b13e979ac16ceba1ed2f0e6ad471f06a" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The CNIL ordered France Travail to justify corrective measures on a specified schedule, with a €5,000 daily penalty for delay." } }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--8d61e479-4403-5ccf-8301-fc8eecd71836", "created": "2026-08-09T01:42:42Z", "modified": "2026-08-09T01:42:42Z", "x_ally_original_id": "dat:6f122c9e-026f-4348-b335-0d3f85f51dbc", "name": "Usernames and account identifiers" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07", "created": "2026-08-08T23:12:00Z", "modified": "2026-08-08T23:12:00Z", "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0", "name": "Names" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--ab430a0e-23bc-5177-814b-26f716196ca0", "created": "2026-08-08T23:12:00Z", "modified": "2026-08-08T23:12:00Z", "x_ally_original_id": "dat:fcd11f98-14a8-47ac-adea-68ad2985528f", "name": "Social Security numbers" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231", "created": "2026-08-08T23:12:00Z", "modified": "2026-08-08T23:12:00Z", "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9", "name": "Contact information" }, { "type": "x-ally-data-exposure", "spec_version": "2.1", "id": "x-ally-data-exposure--36bb2b27-16a3-5816-8230-6bb3229504ca", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "exp:fdf2da81-1a95-44f3-8138-92bac4fdcd2d", "name": "France Travail job-seeker data exposure" }, { "type": "x-ally-legal-proceeding", "spec_version": "2.1", "id": "x-ally-legal-proceeding--4576b953-89ec-5bf1-8831-9deccfd9c5db", "created": "2026-08-09T01:54:30Z", "modified": "2026-08-09T01:54:30Z", "x_ally_original_id": "lgl:74caa11c-5e03-4c6e-a920-b0ddff640b89", "name": "CNIL proceeding SAN-2026-003 against France Travail" } ] }