1.2 million potential data records exposed in Vacaf platform cyberattack

The attack targeted the Vacaf platform, which is used to manage holiday aid for low-income families. The platform is operated by the Caisse d’Allocations Familiales (CAF) of Hérault. The CAF has suspended access to the platform to secure the environment. The attack has not affected the payment of social benefits, but there is a risk of increased phishing attempts. The CAF has activated a crisis cell and informed the Agence nationale de la sécurité des systèmes d’information (ANSSI) and the Commission nationale de l’informatique et des libertés (CNIL).