French Government Data Breach: ANTS Confirms Cyber Incident, Hacker Claims Selling 19 Million Records
Published
Key Takeaways
- Agency targeted: The French government data breach compromised ANTS, exposing sensitive personal identity and administrative records.
- Extensive exposure: A threat actor claims to possess 19 million citizen records that are for sale on illicit forums.
- Regulatory response: Officials launched an active investigation of the ANTS cybersecurity incident alongside national data protection authorities.
A French government data breach was officially confirmed as France Titres, formally known as the “Agence Nationale des Titres Sécurisés” (ANTS), posted a press release on Monday. Operating under the French Ministry of the Interior, this administrative body manages the issuance of official identity documents, including passports, national ID cards, and driver's licenses of millions of citizens.
Data Reportedly Exposed in the Hack
The ANTS cybersecurity incident was detected on April 15, 2026, and the announcement said potentially impacted personal data would be identification data, such as:
- login ID,
- title, surname, first names,
- email address,
- date of birth,
- unique account identifier,
- postal address, place of birth, and telephone number (where applicable).
A threat actor operating under the moniker “breach3d” announced selling allegedly stolen ANTS data on underground forums on April 16. The cybercriminal alleges possession of up to 19 million individual records.
While the agency has not yet verified the exact volume of compromised data, ANTS confirmed the unauthorized disclosure of information from individual and professional accounts on the ants.gouv.fr portal.
Cybersecurity Implications and Mitigation
In response to the data breach, ANTS mobilized the national cybersecurity agency (ANSSI), the Paris Public Prosecutor, and the national data protection authority (CNIL). Forensic investigations remain ongoing.
While no immediate user action is required regarding portal passwords, the French agency advises citizens to exercise extreme vigilance against unsolicited communications claiming to originate from ANTS infrastructure.
In February, the French National Bank Account Registry suffered a breach, while one month earlier, the Pass'Sport data breach exposing 6.4 million accounts was revealed to have originated from the French Ministry of Sports.
In December 2025, local authorities arrested a suspect linked to an Interior Ministry cyberattack.
Related
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular