AKTO

AKTO is a French organization that provides digital deposit services and training dossier instruction to a range of vocational‑training stakeholders. It operates the Mon Espace portal, which companies, trainees, providers, CFA (Centres de Formation d’Apprentis) and other training organizations use to access administrative and instructional resources. Through these services AKTO supports the management of apprenticeship contracts, the submission of training records and the dissemination of pedagogical materials. Its primary market consists of businesses and training actors involved in the French vocational education and training system. By facilitating the exchange of data and documents, AKTO helps ensure compliance with national training regulations.

The source material does not give explicit figures for AKTO’s workforce, annual budget or geographic coverage beyond its headquarters in France. Consequently, any description of its scale must rely on the information that is publicly available in the incident report, which notes that its services affect a broad base of companies and training entities. Without disclosed metrics such as number of members or volume of processed dossiers, the organization’s reach remains unspecified in the provided context.

AKTO’s distinguishing attributes stem from its role as a skills operator within the French vocational training framework, a position that entails managing funding for apprenticeships and professionalization contracts. The March 2025 cyberattack highlighted its responsibility for safeguarding both technical and personal data, prompting a formal complaint, notification to the CNIL under GDPR, and coordinated response efforts with the DNPJ’s Office Anti‑cybercriminality and ANSSI. During the incident, AKTO suspended its digital deposit and training dossier instruction services, demonstrating how central these platforms are to its operational workflow. The organization’s commitment to stakeholder communication was evident in its pledge to inform companies, trainees, providers, CFA and training organizations once the nature of the compromised data was clarified. These actions underscore AKTO’s dual focus on maintaining service continuity and upholding data‑protection obligations.

No details about AKTO’s ownership structure, parent company or subsidiaries are presented in the available sources. Therefore, any description of its corporate governance or affiliations would be speculative and is omitted here.