French citizens' personal data is widely available on the darknet, with public systems lagging in security and legal actions targeting data brokers like Brixhub.
French data on darknet
General André Petillot stated that about 80% of French citizens have their personal data for sale on the darknet, a hidden part of the internet accessible only with special software. This data includes addresses, phone numbers, emails, and health information, which can be used for fraud and identity theft.Darknet risks highlighted
During the Mediterranean Strategic Meetings in Toulon on October 8, 2026, General Petillot warned that some individuals have all their personal information available on this clandestine network. This can be used to create fake loan applications and other forms of fraud, posing significant risks to privacy and security.Public systems lag behind
Hugues Foulon, general director of Orange Cyberdefense, emphasized that public systems in France are not adequately protected in a rapidly evolving digital world. He noted that several public institutions have been targeted recently, including the tax authority, which suffered a major hacking attack in the summer of 2026.Data breaches in France
A Surfshark study from July 2026 revealed that France is the most affected European country by data breaches. In the first half of 2026, 43.4 million accounts were compromised, marking a 62% increase compared to the same period in 2025. This highlights the growing threat of cyberattacks in the country.Legal action against Brixhub
On October 12, 2026, the minister delegate for Digital announced legal action against Brixhub, a free website that functions as a reverse directory, allowing users to find personal information by entering a name. The site also offers to delete data for a fee, a practice criticized by cybersecurity experts as ineffective.Public data sources criticized
Lawyer Yann-Maël Larher described Brixhub as a scam, noting that half of its data comes from public platforms like France Connect and France Travail. He criticized the government for not protecting citizens' data, stating that public systems are the most vulnerable and hold sensitive information such as social security numbers.Individuals affected by Brixhub
Several users have discovered their personal information on Brixhub. Alice found her social security number there, while Julie discovered her family's contact details. Kylian expressed resignation, saying that once you are online, there is no avoiding the exposure of personal data.Cybersecurity recommendations
Benoît Grünemwald advised users to be cautious online, suggesting they choose email addresses carefully, use strong passwords managed by a password manager, and enable two-factor authentication. This adds an extra layer of security by requiring a changing six-digit code to log in, making it harder for cybercriminals to access accounts.