Myconnect, a French digital temporary employment agency, has allegedly been compromised, resulting in the potential exposure of highly sensitive applicant and employee information. A threat actor on a prominent hacking forum claims to have exfiltrated 18GB of data from the company’s systems, consisting of 21,106 files and 15,978 folders. The seller has provided screenshots of the company’s internal portal and directories containing user documents as proof of the breach, and is currently attempting to sell the entire database to a single buyer.
The allegedly compromised data includes:
-
Full names and maiden names
-
Email addresses
-
Mobile and home phone numbers
-
Physical addresses and additional address details
-
Birth details (date, place, and department of birth)
-
Social Security numbers
-
National identity card details (number, issue date, expiration date, and scanned copies)
-
Bank account details (Bank name, IBAN, BIC, and RIB documents)
-
Carte Vitale (French health insurance card) scans
-
Resident card scans
-
Proof of address documents
-
Birth certificates
-
Signed employment documents
-
User portal photos
