French Authorities Confirm Data Breach Amid Hackers’ Data Leak Allegations

The French National Agency for Secure Documents (ANTS) has officially confirmed a severe data breach affecting its central government portal.

This critical infrastructure system manages the issuance of national identity cards, passports, vehicle registration certificates, and driver’s licenses nationwide.

Recent threat intelligence reports suggest this security incident represents a massive compromise that could impact up to 19 million French citizens.

Security teams first detected the unauthorized access on April 15, 2026. Threat actors successfully breached the ants.gouv.fr portal, extracting extensive personal and professional account records.

The Ministry of the Interior has acknowledged the security failure. At the same time, ANTS technical teams work alongside relevant cyber services to pinpoint the exact intrusion vector and assess the total damage.

Exposed Data and Scope

Despite the severity of the leak, ANTS stated that the attackers did not compromise supplementary files or document attachments submitted during administrative procedures.

Furthermore, the exposed personal information does not grant threat actors direct, unauthorized access to the portal accounts themselves.

The breached database exposes highly sensitive personally identifiable information:

• Account login IDs and unique account identifiers
• Complete names, including titles, surnames, and first names
• Primary contact information, like email addresses and phone numbers
• Detailed demographic data, including dates and places of birth
• Physical postal addresses and identity verification data

System administrators immediately deployed security enhancement measures to safeguard the remaining data while ensuring the continuity of essential portal services.

Authorities have launched a comprehensive, multi-agency investigation to track the perpetrators and secure the compromised infrastructure.

To comply with strict data protection frameworks, the agency notified several key regulatory bodies:

• The French Data Protection Authority (CNIL) received an official incident report in accordance with Article 33 of the General Data Protection Regulation.
• The French National Cybersecurity Agency (ANSSI) received a briefing and is actively assisting with the technical forensic investigation.
• The Public Prosecutor of Paris received a formal declaration under Article 40 of the French Code of Criminal Procedure, prompting a criminal inquiry.

The government agency is currently dispatching personalized notifications to inform all impacted citizens. ANTS explicitly stated that users do not need to take any immediate technical actions on their portal accounts.

However, cybersecurity researchers strongly advise affected individuals to maintain heightened vigilance against subsequent social engineering attacks.

Cybercriminals regularly leverage this precise combination of compromised identity data to execute sophisticated phishing and smishing campaigns.

Citizens must scrutinize any unexpected SMS messages, phone calls, or emails appearing to originate from official government services.

ANTS also issued a public warning reminding everyone that purchasing, selling, or distributing this stolen dataset remains a serious criminal offense.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.