Supply chain
⛓ Supply Chain
Ministère du Travail et de l'Emploi Third-Party Breach (November 2024)
Primary Source ↗Incident Details
Young people’s data feared stolen in cyberattack on French government contractor. The French government said an incident directly impacted an unnamed service provider used by the network of “Local Missions” — places that offer advice and support to people between the ages of 16 and 25 about work and training. France’s Ministry of Labor and Employment announced on Thursday that it discovered a cyberattack suspected to have impacted the data of young people it was helping get into employment. According to the ministry’s statement , the attack directly impacted an unnamed service provider used by the department’s network of “Local Missions” — places that offer advice and support to people between the ages of 16 and 25 about work and training.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Third-party vendor
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2024-11-01 Breach occurred
- 2024-11-01 Publicly disclosed