/
← Voltar ao feed
high government social_security

Assurance Retraite breach exposes data of ~370k beneficiaries via compromised partner account

1 fonte(s) · 1 atualização(ões) · publicado 19/10/2026 23:29 · coletado há 3 dias

In September 2024 the French national pension fund Assurance Retraite suffered a data breach affecting approximately 370k assistance beneficiaries. The dataset was added to Have I Been Pwned on 20 Oct 2026 and contains 70.4k unique email addresses. Exposed data includes names, dates of birth, physical addresses, phone numbers, income levels, marital statuses, French social security numbers (NIR) and contact details of relatives or other nominated contacts. Assurance Retraite attributed the incident to a compromised partner account.

Detalhes técnicos

  • Initial access: compromised account belonging to a partner organisation (per the fund's disclosure notice); no further technical detail is given.
  • Sensitive identifiers such as NIR combined with income and family data raise identity fraud and targeted phishing risk.

Remediação

  • Affected individuals should be wary of phishing and social engineering that leverages the exposed personal data.
  • Change reused passwords and enable 2FA where supported.
  • Organisations should enforce strong authentication and monitoring on partner and third-party accounts.

Linha do tempo

  1. haveibeenpwned.com ↗ · pub. 19/10/2026 23:29 · coletado 20/10 01:00 primeiro registro

    Assurance Retraite breach exposes data of ~370k beneficiaries via compromised partner account

    ler a análise desta fonte

    In September 2024 the French national pension fund Assurance Retraite suffered a data breach affecting approximately 370k assistance beneficiaries. The dataset was added to Have I Been Pwned on 20 Oct 2026 and contains 70.4k unique email addresses. Exposed data includes names, dates of birth, physical addresses, phone numbers, income levels, marital statuses, French social security numbers (NIR) and contact details of relatives or other nominated contacts. Assurance Retraite attributed the incident to a compromised partner account.

    Technical Details

    • Initial access: compromised account belonging to a partner organisation (per the fund's disclosure notice); no further technical detail is given.
    • Sensitive identifiers such as NIR combined with income and family data raise identity fraud and targeted phishing risk.

    Remediation

    • Affected individuals should be wary of phishing and social engineering that leverages the exposed personal data.
    • Change reused passwords and enable 2FA where supported.
    • Organisations should enforce strong authentication and monitoring on partner and third-party accounts.