Cybersecurity Alert: 60% of French Ignore Fraudulent Messages: Are You At Risk?

The news of a data breach, rather than the scam itself, urges French people to take protective action. This is a key finding from the third edition of the barometer on French cyber perception, conducted by Ipsos.Digital for Cybermalveillance.gouv.fr. This report coincides with the launch of Cybermois, a cybersecurity awareness month held every October.

Nearly half of the French have been notified of data breaches

In the past twelve months, 45% of the surveyed individuals received a notification that their personal data had been compromised, up from 30% the previous year. This statistic reflects notifications received, not the actual risk measurement: it shows how many French people were informed that an entity holding their data had been targeted.

However, this exposure did not overshadow the most common scams. During the same period, respondents reported encountering:

• Fraudulent emails or SMS messages, for 53% of them, making it the most widespread form of cyber malfeasance,
• A fake bank advisor, for 15% of respondents,
• A fraudulent e-commerce site, for 10% of those surveyed who paid for orders that were never delivered.

Cybermalveillance.gouv.fr attributes the rise in data breaches to the structuring of an underground market for stolen data, a conclusion previously outlined in its 2025 activity report.

A majority of victims do not take any action

The response to an incident often depends less on its severity than on how the victim learns about it. When detected independently, a fraud attempt frequently leads to no further action. On the other hand, if flagged by someone else, it tends to have more impact.

Six out of ten victims did nothing after receiving a fraudulent message

This lack of response is not limited to fraudulent messages: 43% of those contacted by a fake bank advisor took no action, as did 31% of cyber harassment victims. And when action is taken, turning to a third party is uncommon. According to the barometer, 37% of online account hacking victims resolved the issue on their own, for instance by searching for information online, as did 28% of those dealing with fake tech support.

Actions taken, but without inquiring about what was exposed

Among those who were notified of a data breach involving their personal information, 59% reported increased vigilance towards unknown emails, SMS messages, and phone calls. 53% changed their passwords, and 44% monitored their bank accounts more closely. However, only 13% contacted the concerned organization to find out what had been stolen. Yet, the necessary measures depend on the nature of the leaked information, whether it be a password, IBAN, or personal identification.

A need for support, especially among younger people

The confidence of the French in their own level of knowledge has been declining for two editions: 55% feel sufficiently informed about the risks associated with Internet use, down from 58% in the previous edition and 63% in 2024. Those unsure of their knowledge level increased from 4% to 19% in two years, and 25% consider themselves poorly equipped. To gather information, the French primarily turn to the internet (46%), followed by official public services (40%).

The digital divide does not favor the most connected. Following a data breach, 13% of 18-34 year-olds remained inactive, compared to 6% of 55-75 year-olds. Despite this, the younger age group reported more severe consequences: 18% lost access to one of their accounts, compared to 5% of their elders, and 26% reported an emotional impact or increased mental load, compared to 16%.

While the French are increasingly able to identify cyber malfeasances, the 2026 results oppositely show that, when facing these threats, the need for support is growing. The industrialization of cybercrime and the generalization of attacks necessitate that we move from mere awareness to a true culture of action. Doing nothing after a data breach is like leaving a door open to one’s digital life, explains Jérôme Notin, managing director of Cybermalveillance.gouv.fr.

Methodology: Ipsos bva study for Cybermalveillance.gouv.fr, conducted via the Ipsos.Digital omnibus among a sample of 2,000 people representative of the French population aged 18 to 75 years, using the quota method. Self-administered online questionnaire from May 13 to 18, 2026, with an uncertainty margin of 0.4 to 2.2 points.