Last Update: 09/22/2026 at 11:34 PM EST

France’s Identity Data Breach Unfolds

Coverage from WebProNews, Safestate, and others

France’s Identity Data Breach Unfolds topic image

France Titres, the French agency responsible for identity and vehicle-registration services, confirmed a breach detected in April 2026 after the threat actor breach3d claimed to possess and sell millions of records.

Exposed information reportedly includes names, contact details, birth data, addresses and account identifiers, while the agency said the incident did not enable direct access to user portals and that uploaded identity documents were not affected. The case has prompted user warnings about phishing, regulatory and law-enforcement notifications, and a Paris investigation into a detained teenage suspect; the final scale and full technical cause remain uncertain.

Looking Back
291 Day Timeline
2025Jan 1Mar 5May 28Jul 30Oct 22Dec 242026Jan 1Mar 5May 28Jul 30Oct 22Dec 24
History
09/04/2026

The account is largely unchanged. The current version more explicitly emphasizes that the intrusion method and relationship between the claimed dataset and affected accounts remain unresolved, while framing data concentration as an additional systemic concern.

09/04/2026

The main update is that France Titres notified CNIL and ANSSI, adding formal data-protection and cybersecurity oversight to the existing police investigation. The breach’s core facts and reported impact remain otherwise unchanged.

All Articles41 articles
Important29 articles · CI Score 60 and above
WebProNews / Juan Vasquez
France's DGFiP disclosed in August that compromised employee and third-party credentials enabled unauthorized access to tax and property records affecting 678,000 people and businesses in France.
8/18/2026 • Data Breaches & Exposure Events • General
Safestate
France's Direction generale des Finances publiques confirmed in August 2026 that stolen authorized-user credentials enabled access to tax and property records for 678,000 individuals and businesses.
8/18/2026 • Data Breaches & Exposure Events • General
Engadget / Anna Washenko
France Titres confirmed an April 15 breach and warned of phishing risk after a claimed theft of up to 19 million identity records.
4/22/2026 • Data Breaches & Exposure Events • General
Engadget / Anna Washenko
France Titres detected a data breach on April 15 and reported millions of exposed identity records on April 16, raising phishing risk.
4/22/2026 • Data Breaches & Exposure Events • General
Dark Web Informer
In France, ChimeraZ claims a Proprietes-Privees.com API compromise exposed personal and credential data for about 2.5 million people, but the claim is unverified.
6/9/2026 • Data Breaches & Exposure Events • General
Claims Journal
Paris prosecutors investigated a detained 15-year-old on April 25 for suspected ANTS hacking and dark-web sale of millions of French identity records.
5/1/2026 • Data Breaches & Exposure Events • General
WHBL
Paris authorities investigated a detained 15-year-old suspected of hacking ANTS and selling stolen French identity data on the dark web, with citizen notification issued April 22.
4/30/2026 • Data Breaches & Exposure Events • General
WTAQ News Talk
Paris prosecutors opened an investigation on April 30 into a detained teenager suspected of hacking ANTS and attempting dark web resale of millions of French identity records.
4/30/2026 • Data Breaches & Exposure Events • General
Global Banking & Finance
Paris prosecutors investigate a detained teenager for suspected hacking of France’s ANTS ID agency after dark-web sale of millions of citizens’ records.
4/30/2026 • Data Breaches & Exposure Events • General
WKZO
Paris prosecutors opened an investigation in 2024 into suspected hacking of France's ANTS identity data system after data resale attempts on the dark web.
4/30/2026 • Data Breaches & Exposure Events • General
Safestate
ANTS confirmed an April 15, 2026 breach of ants.gouv.fr, exposing personal account data and prompting notifications to CNIL and Paris prosecutors.
4/22/2026 • Data Breaches & Exposure Events • General
BleepingComputer / Sergiu Gatlan
DINUM and ANSSI announced a Sunday Tchap breach in France after unauthorized access via a hijacked user account potentially exposed personal data.
6/9/2026 • Data Breaches & Exposure Events • General
BleepingComputer / Ionut Ilascu
France Titres ANTS and the Paris Prosecutor's Office detained a 15-year-old suspect in connection with an April ANTS breach involving millions of allegedly stolen records.
5/1/2026 • Data Breaches & Exposure Events • General
The Record / Daryna Antoniuk
French prosecutors investigate an alleged ANTS breach after cybercriminal forums reportedly offered millions of authentic identity records for sale.
4/30/2026 • Data Breaches & Exposure Events • General
South China Morning Post
Paris prosecutors investigated a detained 15-year-old for suspected ANTS hacking after dark-web listings of millions of French identity data records.
4/30/2026 • Data Breaches & Exposure Events • General
TechRadar / Sead Fadilpašić
ANTS confirmed a cyberattack after a dark web sale claim of 19 million identity records tied to ants.gouv.fr, with incident detection on April 15, 2026.
4/22/2026 • Data Breaches & Exposure Events • General
Sumsub
France's Finance Ministry confirmed in June that a malicious actor stole taxpayer data from DGFiP systems in France, prompting containment and investigation.
8/17/2026 • Data Breaches & Exposure Events • General
BeyondMachines
France's Direction générale des Finances publiques confirmed on August 13, 2026, that stolen credentials enabled unauthorized extraction of government records before access was terminated.
8/15/2026 • Data Breaches & Exposure Events • General
Bitcoin News / Sergio Goschenko
France's DGFiP disclosed unauthorized access to 678,438 taxpayers' personal information after an intrusion on June 12 through compromised internal systems.
8/15/2026 • Data Breaches & Exposure Events • General
Bitcoin Magazine / Mathew Di Salvo
France's tax administration confirmed in August that hackers breached DGFiP systems, exposing partial taxpayer and business records from France.
8/14/2026 • Data Breaches & Exposure Events • General
SecurityWeek / Ionut Arghire
France's Directorate General of Public Finances disclosed a June-July credential-based breach affecting approximately 678,000 users and exposing tax and property records in France.
8/18/2026 • Data Breaches & Exposure Events • General
BleepingComputer / Sergiu Gatlan
In August, France's Ministry of the Economy and Finance disclosed a breach after attackers accessed DGFiP systems in France and extracted data on 678,000 individuals and professionals.
8/17/2026 • Data Breaches & Exposure Events • General
Help Net Security / Sinisa Markovic
France's DGFiP disclosed in August 2026 that unauthorized access to government systems exposed tax data involving 678,000 individuals and professionals in France.
8/17/2026 • Data Breaches & Exposure Events • General
The Record / Daryna Antoniuk
France's Directorate General of Public Finances disclosed in late June that hackers accessed tax systems and extracted personal and business data in France.
8/14/2026 • Data Breaches & Exposure Events • General
France 24
France reports late-2025 data breach exposing health and banking records in medical practices across the country.
2/27/2026 • Data Breaches & Exposure Events • General
Anadolu Agency
France Health Ministry reports 15 million health records exposed in late 2025 following a cyberattack on Cegedim Sante software used by 1500 doctors in France.
11/3/2025 • Data Breaches & Exposure Events • General
BleepingComputer / Sergiu Gatlan
DINUM disclosed a Tchap breach in France affecting 73,467 public-sector accounts after compromised access enabled scraping of unencrypted public chat room data.
6/12/2026 • Data Breaches & Exposure Events • General
Privacy Guides / Nate Bartram
Vercel, Seiko USA, France Titres, and Rituals faced or confirmed breach-related incidents between April 17 and 23, 2026, involving employee, customer, and citizen data exposure claims.
4/24/2026 • Data Breaches & Exposure Events • General
BleepingComputer / Bill Toulas
ANS on April 15, 2026 detected an ants.gouv.fr security incident after breach3d claimed up to 19 million records for sale, with CNIL, Paris prosecutors, and ANSSI notified.
4/21/2026 • Data Breaches & Exposure Events • General
Interesting12 articles · CI Score 45–59
Global Banking and Finance / Hugo Lhomedet
Insee disclosed in France a cyberattack directory breach on 12,800 current and former staff and related civil service corps, exposing identities and professional contact details.
6/26/2026 • Data Breaches & Exposure Events • General
Reuters / Hugo Lhomedet
Insee reported a cyberattack on an employment directory on June 26, affecting about 12,800 staff with exposure limited to identities and professional contact details.
6/26/2026 • Data Breaches & Exposure Events • General
KuCoin News
France reported 41 crypto-related kidnappings since 2026, and observers cited centralized KYC data exposure after the Ledger 2020 breach.
5/24/2026 • Risk, Harm & Societal Impact • General
Slashdot
ANTS detected a data breach on April 15 and confirmed potential exposure of passport and national ID PII in France while notifying affected citizens.
4/23/2026 • Data Breaches & Exposure Events • General
Rocketnews
France's ANTS confirmed a data breach on April 20 after detecting an attack on April 15, citing possible exposure of identity and contact data for millions.
4/22/2026 • Data Breaches & Exposure Events • General
TechRadar
French government agencies investigated a Tchap breach in 2026 after hacking claims and ANSSI confirmation, amid Dutch and US warnings about Russian targeting of Signal and WhatsApp accounts.
6/10/2026 • Data Breaches & Exposure Events • General
Help Net Security / Sinisa Markovic
Paris authorities detained a 15-year-old over a France Titres data breach after ANTS detection, forum sale confirmation, and a criminal investigation.
5/4/2026 • Data Breaches & Exposure Events • General
TechCrunch / Lorenzo Franceschi-Bicchierai
ANTS, the French identity document issuing authority, confirmed a data breach on April 20 after detecting an April 15 attack, with ongoing assessment of affected citizens.
4/22/2026 • Data Breaches & Exposure Events • General
Help Net Security
France Titres (ANTS) disclosed an April 15 data breach in a French identity portal, reporting the incident to CNIL under GDPR and to national cybersecurity authorities.
4/22/2026 • Data Breaches & Exposure Events • General
BleepingComputer / Bill Toulas
France's finance ministry reports data breach at the FICOBA bank registry in late January, affecting about 1.2 million accounts nationwide.
2/20/2026 • Data Breaches & Exposure Events • General
CISO Series / Steve Prentice
French officials, cybersecurity researchers, and law-enforcement authorities reported breaches, data theft, fraud, and surveillance risks affecting individuals, companies, and infrastructure across multiple countries in 2026.
8/17/2026 • Data Breaches & Exposure Events • General
DataBreachToday
Acronis, government agencies, security researchers, and affected organizations reported malware, ransomware, system vulnerabilities, and data exposures across Europe, the Americas, and global vendor networks in 2026.
8/20/2026 • Data Breaches & Exposure Events • General