Science & Tech · Cybersecurity · 1 day ago
Nearly 1.2 million Caf beneficiary records reportedly put up for sale
Vacaf.org is a website for holiday assistance from France’s family benefits fund, known as the Caf.
On Friday, October 9, a hacker reportedly offered nearly 1.2 million beneficiary records for sale on an online forum.
The data were said to have been taken from Vacaf.org in a cyberattack.
The report does not say what information the records contain.
The incident matters because the records are linked to Caf beneficiaries.
No further response or next steps are described.
A hacker reportedly offered for sale nearly 1.2 million records from Vacaf.org, a holiday assistance website run by France’s Family Allowance Fund.
The listing appeared on a forum on Friday, October 9, according to Ouest-France.
The report cited a website that specializes in data leaks.
- Who
- A hacker reportedly put the records up for sale.
- What
- Nearly 1.2 million records of Family Allowance Fund beneficiaries were reportedly offered for sale.
- When
- Friday, October 9. The article was published October 10, 2026.
- Where
- The records were reportedly extracted from Vacaf.org, and offered for sale on a forum.
- Why
- Not stated
This story does not have two clearly opposing sides.
No direct quotes in the coverage so far.
A hacker reportedly offered nearly 1.2 million records from Vacaf.org for sale on a forum.
Ouest-France published its report.
- Records reportedly offered
- Nearly 1.2 million
- Website
- Vacaf.org
- Website operator
- Caisse d’allocations familiales
- Reported listing date
- Friday, October 9
- Report outlet
- Ouest-France
Sources
Related news
Canadian cybersecurity negotiator arrested in ShinyHunters investigation
US seizes two China-linked hacking tools used against critical infrastructure
Canadian cybersecurity executive arrested on extortion-related charges
Security Affairs launches weekly AI and cybersecurity newsletter
Anthropic offers free AI vulnerability scans to open-source projects
FBI arrests another suspect linked to ShinyHunters jobs-site breach
AI agents push identity security to the forefront for companies
AnyDesk Linux flaw allowed attackers to gain root access without approval
Attackers exploit AhsayCBS flaws to install webshells and crypto miners
Organizations urged to prepare for quantum-resistant encryption
Allied alert details cyber tactics linked to sanctioned Chinese group
