[STORMOUS] – Ransomware Victim: www[.]francetravail[.]fr

AI Generated Summary of the Ransomware Leak Page

On 2025-10-27 20:46:17.782934, a leak post published by the Stormous ransomware group identifies www.francetravail.fr as a victim. The page presents itself as a public data‑leak notice, indicating that sensitive information was exfiltrated from the victim’s network in a data‑leak event rather than a pure encryption incident. A claim URL is listed on the page, but the URL is defanged for this summary. No separate compromise date is provided; the timestamp is treated as the post date. The page shows no downloadable materials or images, and no ransom amount or demand is stated within the available data.

The page enumerates a broad set of highly sensitive personal data described as exposed. The listed categories include plaintext authentication credentials (usernames and passwords) and personal identifiers such as full names, dates of birth, and gender, along with addresses, phone numbers, and emails. Additional data types reportedly include employment history and professional skills, government identifiers and banking details (CNI and Relevé d’Identité Bancaire, i.e., RIB), and employment documentation such as contract types (CDD, CDI, and temporary assignments). Further items referenced include tax documents (Avis d’imposition), social security attestations, training certificates, and work authorization documents, among others. There are no images or screenshots on the page, nor visible downloadable files in the provided post, and no explicit ransom figure is disclosed in the available information.