On March 13, 2026, the French division of global staffing and recruitment firm GD France appeared on the leak site of the nightspire ransomware group. Public reporting indicates the attackers exfiltrated internal files during a ransomware incident, although the precise number of people whose personal information was exposed remains unknown.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch GD France
Get alerted the next time GD France files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about GD France’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Reported Details of the Breach
Available reporting describes the listing on the nightspire leak site as confirmation that data had been allegedly taken from GD France systems. The exposed material consists of internal files rather than a single clean database dump. No exact count of affected records has been published, and the specific types of personal data included have not been detailed in public summaries. The incident follows the group’s typical pattern of encrypting victim networks, exfiltrating selected files, and later publishing samples when demands are not met.
Why This Matters for You and Your Family
When a company that handles employment records, contracts, or background checks is breached, the information can include names, addresses, dates of birth, national identification numbers, salary details, and contact information for both current and former employees as well as candidates. If any member of your household has worked with or applied to GD France or its parent group, your data may now sit in an attacker-controlled archive. Credential leaks from such incidents often cascade into personal email accounts, banking logins, and other services where the same password was reused.
Children are not immune. Many families list dependents on employment or insurance forms, and teenagers’ information can appear in family coverage records. Once an address or phone number escapes, it can link gaming accounts, school email addresses, and social profiles together in ways that expose the entire household.