Zero Radar
← feed
MediumData breachHIBP-AssuranceRetraiteupdated 25 Oct 2026, 13:32 UTC

French pension fund data breach exposed personal and ID details

Personal details of about 370,000 people receiving pension assistance were stolen, including national ID numbers. This makes them targets for scams and identity fraud.

Official source
SeverityMediumData breach
Being exploited?UnclearNo reports either way yet
What to doCheck exposureTreat any unsolicited message about your pension or benefits as suspicious and verify it directly with Assurance Retraite before acting.
How sure is this?Official sourceBacked by an official source

How the attack works simplified

  1. 1Attacker gets accessVia a compromised partner account
  2. 2Enters partner accessUses the trusted partner login
  3. 3Records accessedBeneficiary records reached
  4. 4Personal data copiedNames, IDs, income, contacts
  5. ResultPersonal data of about 370k people exposed

What happened

In September 2024, the French national pension fund Assurance Retraite was breached via a compromised partner account, exposing records of roughly 370k assistance beneficiaries.

Why it is dangerous: Stolen national social security numbers, birth dates, addresses and income data can be used for identity theft and convincing phishing; beneficiaries and their listed relatives are at risk.

Are you affected?

You are affected if you received assistance from Assurance Retraite or were named as a family member or contact in its records.

Package / productAffected versionsFixed in
lassuranceretraite.frsee advisoryno fix yet

What to do

  1. Be wary of unexpected emails, calls or texts referring to your pension or benefits, and verify them through official channels
  2. Watch your bank and credit accounts for unusual activity and consider a credit freeze if available
  3. Check whether your email address appears in known breaches at haveibeenpwned.com

Timeline

  1. 20 Oct 2026, 02:29 UTC
    Publicly disclosed
  2. 20 Oct 2026, 02:29 UTC
    Reported by Have I Been Pwned · Have I Been Pwned

Sources 1 report, oldest first

Official vendor, government CERT or advisory database

Technical details

ID
HIBP-AssuranceRetraite
Disclosed
20 Oct 2026, 02:29 UTC
On Zero Radar
before the radar started
Last change
25 Oct 2026, 13:32 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

French pension fund data breach exposed personal and ID details · Zero Radar