ANTS breach exposed 12-18 million records, criminal investigation underway
Investigation confirms ANTS breach exposed 12-18 million records; cybercrime charges being pursued.
Event / Security
France ANTS Data Breach
French government's ANTS agency suffered a security breach on April 15, 2026, compromising personal data including names, email addresses, birthdates, and account credentials of citizens and professionals. The Interior Ministry announced the incident on April 20 and initiated a criminal investigation by Paris prosecutors.
2 reported locations
Daily activity
0 articles0 articles
2026-08-18 to 2026-11-15 · UTC publication dates
Coverage begins 20 Apr, 15:06 UTC
Follow the documented timeline or explore the related reporting.
What happened
Cyberattack charges carry potential sentence of up to seven years imprisonment
The alleged offenses related to the ANTS cyberattack carry potential penalties of up to seven years imprisonment and a fine of 300,000 euros. These penalties apply to the charges of unauthorized access to and attacks on automated data processing systems operated by the state.
ANTS cyberattack resulted in leak of 12-18 million data records
The cyberattack on the ANTS portal resulted in the leak of between 12 and 18 million lines of data. These records were offered for sale on cybercriminal forums by the hacker 'breach3d'. The ANTS confirmed unusual activity on its network on April 13, 2026, and verified the authenticity of the leaked data.
15-year-old arrested in connection with ANTS data breach investigation
A 15-year-old minor was arrested on April 25, 2026, and placed in custody in connection with the cyberattack targeting the Agence nationale des titres sécurisés (ANTS) portal. The suspect is believed to be the hacker known as 'breach3d'. The arrest was announced by the Paris prosecutor on April 30, 2026.
Charges filed and custody hearing conducted for suspect
On Wednesday following the arrest, a judge's instruction hearing was held regarding the 15-year-old suspect. The Paris prosecutor requested the indictment and placement under judicial supervision of the minor. The charges constitute violations including unauthorized access, maintenance, extraction, transmission, possession, and obstruction of functioning of a state-operated automated data processing system containing personal data.
Cybercrime investigation launched into ANTS attack
The Paris prosecutor's cybercrime unit opened a formal investigation on April 16, 2026, following notification by the Ofac (Office anti-cybercriminalité) in April of the cyberattack targeting the ANTS. The investigation focuses on unauthorized access to and extraction of personal data from a state-operated automated data processing system.
French Interior Ministry reports criminal investigation launched into ANTS security breach
The Interior Ministry filed a criminal report with the prosecutor of the Paris Republic under Article 40 of the French Code of Criminal Procedure to initiate a formal investigation into the security incident. Affected users are being notified individually about the breach.
ANTS implements enhanced security measures following data breach incident
In response to the security incident, ANTS and competent government services launched technical investigations to determine the origin and scope of the breach. Enhanced security measures were implemented to ensure continuity of portal services and protect user data going forward.
Personal identification data compromised in ANTS breach including names, emails, and birthdates
The compromised personal data includes identification information such as login credentials, names, surnames, email addresses, dates of birth, and unique account identifiers. For some accounts, additional data was affected including postal addresses, places of birth, and telephone numbers. The breach did not include supplementary documents submitted during identity application processes.
ANTS detects security incident affecting personal data of French citizens and professionals
The Agence nationale des titres sécurisés (ANTS), which manages French identity documents and vehicle registration, detected a security incident on April 15, 2026. The incident potentially affected personal data of both individuals and professionals using the platform. The Interior Ministry announced the incident on April 20, 2026.
Read the coverage
2 alternative perspectives
French authorities arrest teenager in ANTS data breach investigation
Teenager arrested in ANTS data breach case; faces potential seven-year sentence.
France's ANTS launches investigation after identifying security breach
French identity agency ANTS launches investigation after detecting breach of citizen personal data.