Back to Feed
BreachesJun 4, 2026

🚨🇫🇷 A threat actor known as S646 is selling a dataset allegedly scraped from Pôle Emploi, the...

S646 threat actor sells dataset of 10M messages from French employment agency Pôle Emploi

Vendor Watch

Run French Government (Pôle Emploi)?

Get an email when a reviewed story names French Government (Pôle Emploi), usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works

Summary

A threat actor operating under the handle S646 is offering a dataset allegedly containing approximately 10 million messages scraped from Pôle Emploi, France's government employment agency. The exposed data reportedly includes agency details, salary codes, employee names, and identifiers. This represents a significant breach of a critical French government institution with potential privacy and security implications for millions of individuals.

Indicators of Compromise

  • malware — Pôle Emploi data scraper

Entities

S646 (threat_actor)French Government (Pôle Emploi) (vendor)