France Titres, the federal government company in France for issuing and managince administrative paperwork has disclosed a knowledge breach after a risk actor claimed the assault and stealing citizen knowledge.
Often referred to as Agence nationale des titres sécurisés (ANTS), the executive frame operates below the French Ministry of the Internal, serving because the managing authority for legitimate id and registration paperwork in France. This comprises motive force’s licenses, nationwide ID playing cards, passports, and immigration paperwork.
In line with a press release the company printed the day prior to this, the assault happened remaining week, and whilst the investigation continues to be ongoing, a number of knowledge varieties for an undisclosed choice of people could have been uncovered.
“On Wednesday, April 15, 2026, the Nationwide Company for Protected Paperwork (ANTS) detected a safety incident that can contain the disclosure of knowledge from particular person {and professional} accounts at the ants.gouv.fr portal,” reads ANTS’s announcement.
The varieties of knowledge that can were uncovered are:
- Login ID
- Complete title
- Electronic mail cope with
- Date of beginning
- Distinctive account identifier
- Postal cope with (for some)
- Homeland (for some)
- Telephone quantity (for some)
ANTS mentioned that it’s recently within the strategy of notifying the ones known as impacted.
The company famous that the uncovered knowledge does no longer permit unauthorized get admission to to its digital portals. Then again, the similar knowledge can be utilized in phishing and social engineering assaults.
“No motion is needed from customers. Then again, they’re instructed to stay extremely vigilant referring to any suspicious or bizarre messages they are going to obtain (SMS, telephone calls, emails, and many others.) that seem to return from ANTS,” the company warned.
ANTS has notified the knowledge coverage authority (CNIL), the Paris Public Prosecutor, and has additionally concerned the nationwide cybersecurity company (ANSSI) within the reaction effort. The company warned that the sale or dissemination of the knowledge is unlawful.
19 million data claimed stolen
On April 16, a risk actor the usage of the moniker ‘breach3d’ claimed the assault on hacker boards claimed the assault on ANTS, alleging to be preserving as much as 19 million data.
The risk actor claims that the stolen knowledge incorporates complete names, touch main points, beginning knowledge, house addresses, account metadata, and gender and civil standing.
The information has been presented on the market for an undisclosed quantity, so it has no longer been widely leaked but.
ANTS saus that consumer don’t wish to take any motion however recommends exercising “excessive warning” about suspicious or bizarre communique over SMS, voice, and emails showing to return from the company.
BleepingComputer has contacted ANTS to invite in regards to the risk actor’s allegations, however we now have no longer won a reaction as of publishing.
AI chained 4 zero-days into one exploit that bypassed each renderer and OS sandboxes. A wave of latest exploits is coming.
On the Self sufficient Validation Summit (Would possibly 12 & 14), see how self reliant, context-rich validation reveals what is exploitable, proves controls hang, and closes the remediation loop.
Declare Your Spot
