Afpa launches institutional overhaul following cybersecurity breach
Afpa restructures after breach, cutting 867 jobs and closing 30 facilities nationwide.
Event / Security
Series of cyberattacks targeting French government institutions and public agencies, including data breaches affecting millions of individuals through vulnerabilities in third-party systems.
2026-09-19 to 2026-11-05 · UTC publication dates
Coverage begins 19 Sept, 15:13 UTC
Follow the documented timeline or explore the related reporting.
Two hackers claimed on Wednesday and Thursday to have obtained personal data from the Afpa (Agence nationale pour la formation des adultes), France's national adult training agency. After initial investigations, Afpa identified a potential data extraction linked to a vulnerability in a third-party tool used to manage accommodation services. The tool is hosted externally by a third-party vendor and is not integrated into Afpa's main information systems, meaning core Afpa services were not directly compromised. The breach potentially affects up to 1.7 million people, though no sensitive data such as banking information or social security numbers were available on the compromised application. Extracted personal data likely includes names, addresses, and possibly telephone numbers.
France is among the countries most targeted by cyberattacks according to multiple reports and cybersecurity experts. The country's targeting is attributed to the attractiveness of its data holdings and certain weaknesses in its defensive capabilities. Recent incidents include a massive theft of tax authority data and a cyberattack against the National Education system. Stolen data is typically resold on black markets and used for fraud schemes.
The Afpa announced a major restructuring plan involving the elimination of up to 867 positions out of 5,700 total employees and the potential closure of 30 training centers out of 142 nationwide. The restructuring was prompted by a decline in public procurement demand for the organization's services.
Afpa restructures after breach, cutting 867 jobs and closing 30 facilities nationwide.
Afpa breach exposes 1.7 million records as France faces elevated institutional cyberattack targeting.