Breaches and incidents
Hauts-de-France Region (France) via contractors Atexo and Docaposte: data of about 545,000 aid applicants leaked, possibly bank details
Per AFP (via Techniques de l’Ingenieur), regional president Xavier Bertrand said data on nearly 545,000 people leaked after a cyberattack on two contractors.
- Disclosed
- Verification
- Confirmed by two or more outlets
What happened
- Per AFP (via Techniques de l’Ingenieur), regional president Xavier Bertrand said data on nearly 545,000 people leaked after a cyberattack on two contractors: at most 515,000 of 745,000 users of Atexo’s regional aid platform (names, emails, type of third party, authorizations) and Docaposte’s Carte Generation #HDF (mainly apprenticeship contracts and RIBs). Next.ink reports both platforms were closed.
- Root cause: not disclosed; Next.ink says the providers identified the flaws and the attacker’s method.
- Attacker: a forum user claimed the attack and first said they held data on over 700,000 people (per AFP citing FrenchBreaches); not named.
- The region filed a complaint, informed ANSSI, said its internal information system was not affected and began informing users; whether Atexo-held RIBs were accessed was not yet known.