INSEE says a cyberattack exposed names and work contacts of about 12,800 staff. No passwords or bank details were taken, and public census data is intact.