Data leak at Cnaf: Vacaf scheme compromised
A cybersecurity incident affected the Vacaf platform of the National Family Benefits Fund on Friday. Beneficiary data is reported to have been exposed.
Cybersecurity incident at Cnaf
According to TF1 Info, the National Family Benefits Fund (Cnaf) announced on Saturday a cybersecurity incident affecting the "Vacaf" holiday assistance scheme on Friday. A data leak concerning beneficiary information was reported, without clarification of the number of people affected for the time being.
Access to the vacaf.org platform was quickly suspended in order to secure the environment and prevent any further unauthorised access. Cnaf has moreover activated a crisis unit in response to this incident.
Non-financial data affected
The organisation states that neither the bank details of allowance recipients nor the access passwords to Caf online services are among the compromised data. The incident also has no impact on the payment of benefits by the various funds.
According to specialist site FrenchBreaches, the perpetrator of the cyberattack claims approximately 1.2 million beneficiary files, a figure that Cnaf has not confirmed. The organisation specified that it would inform affected individuals as soon as it had a complete picture of the scope of the incident, providing them with recommendations to protect themselves against potential fraud attempts, phishing or identity theft.
A complaint will be filed in the coming hours.
Source: TF1 Info