Place des Salariés
CriticalConfirmedEmployment and HR
The French employee-benefits platform Place des Salariés, operated by the Haxoneo group, suffered unauthorized access to its database on 16 September 2026, with data copied by a third party. Haxoneo notified affected individuals on 22 September 2026 and reported the incident to the CNIL within the regulatory 72-hour window, while also filing a police report. Exposed data covers identity, contact details, employment and family information, benefit-usage history, and documents uploaded to the platform (ID documents, proof of address, birth certificates, school certificates, invoices). Haxoneo states no banking data was compromised and has deactivated all passwords to force their renewal.
Combining identity, address, family ties, employment data and official documents makes targeted fraud, identity theft or highly credible fraudulent messages easier to carry out.
- Disclosed on
- September 22, 2026
- Incident dated
- September 16, 2026
- Sector
- Employment and HR
- Country
- France
- Cause
- Undisclosed
Exposed data
- Email address
- Full name
- Phone number
- Postal address
- Date of birth
- Employment data
- Order history
- Identity document
- Password (hashed)
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- Change that password — and everywhere you reused it. That is how a leak spreads to your other accounts.
- Turn on two-factor authentication on the affected accounts: a stolen password is then no longer enough.
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
- Place des Salariés : fuite de données touchant ses utilisateursFuites Infos
- Cyberattaque chez Place des Salariés : des données familiales et administratives compromisesCyberattaque.org
- Place des Salariés piraté : des données personnelles et documents...FrenchBreaches
- Fuite de données chez Place des Salariés (Haxoneo) : ce que doivent décider entreprises adhérentes, salariés et prestatairesMaître Reda Kohen, avocat
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact