---
title: "Data breach at Place des Salariés"
description: "The French employee-benefits platform Place des Salariés, operated by the Haxoneo group, suffered unauthorized access to its database on 16 September 2026, with data copied by a third party. Haxoneo notified affected individuals on 22 September 2026 and reported the incident to the CNIL within the r"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-22-place-des-salaries
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-22
dateModified: 2026-09-22
---
# Place des Salariés

Data breach — Critical

The French employee-benefits platform Place des Salariés, operated by the Haxoneo group, suffered unauthorized access to its database on 16 September 2026, with data copied by a third party. Haxoneo notified affected individuals on 22 September 2026 and reported the incident to the CNIL within the regulatory 72-hour window, while also filing a police report. Exposed data covers identity, contact details, employment and family information, benefit-usage history, and documents uploaded to the platform (ID documents, proof of address, birth certificates, school certificates, invoices). Haxoneo states no banking data was compromised and has deactivated all passwords to force their renewal.

Combining identity, address, family ties, employment data and official documents makes targeted fraud, identity theft or highly credible fraudulent messages easier to carry out.

| Fact | Value |
| --- | --- |
| Disclosed on | September 22, 2026 |
| Incident dated | September 16, 2026 |
| Sector | Employment and HR |
| Country | France |
| Cause | Undisclosed |
| Severity | Critical |
| Status | Confirmed |

## Exposed data

- Email address
- Full name
- Phone number
- Postal address
- Date of birth
- Employment data
- Order history
- Identity document
- Password (hashed)
- Other personal data

## What you can do

- Change that password — and everywhere you reused it. That is how a leak spreads to your other accounts.
- Turn on two-factor authentication on the affected accounts: a stolen password is then no longer enough.
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Place des Salariés : fuite de données touchant ses utilisateurs](https://fuitesinfos.fr/article/2026-09-22-place-des-salaries) — Fuites Infos
- [Cyberattaque chez Place des Salariés : des données familiales et administratives compromises](https://www.cyberattaque.org/cyberattaque-chez-place-des-salaries-des-donnees-familiales-et-administratives-compromises/) — Cyberattaque.org
- [Place des Salariés piraté : des données personnelles et documents...](https://frenchbreaches.com/alertes/place-des-salari-s-haxoneo-mudy0b27eljs842gfja) — FrenchBreaches
- [Fuite de données chez Place des Salariés (Haxoneo) : ce que doivent décider entreprises adhérentes, salariés et prestataires](https://kohenavocats.fr/2026/09/23/place-salaries-haxoneo-fuite-donnees-entreprises-decisions-2026/) — Maître Reda Kohen, avocat

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-22-place-des-salaries
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees