


Perceptive Security
SOC/SIEM Consultancy

French govt agency confirms breach as hacker offers to sell data
Published:
21 April 2026 at 21:46:04
Alert date:
21 April 2026 at 22:04:46
Source:
bleepingcomputer.com
Data Breach & Exfiltration, Identity & Access
France Titres, the French government agency responsible for issuing and managing administrative documents, disclosed a data breach after a threat actor claimed responsibility for the attack and theft of citizen data. The hacker is reportedly offering to sell the stolen data, which likely contains sensitive personal information from French citizens who use government administrative services. This represents a significant breach of government infrastructure with potential impact on citizen privacy and national security.
Technical details
France Titres (ANTS) government agency detected a security incident on April 15, 2026 involving potential data disclosure from individual and professional accounts on the ants.gouv.fr portal. A threat actor using the moniker 'breach3d' claimed responsibility for the attack and is offering to sell up to 19 million records on hacker forums. The exposed data includes login IDs, full names, email addresses, dates of birth, unique account identifiers, and for some users: postal addresses, place of birth, and phone numbers.
Mitigation steps:
Users advised to remain highly vigilant regarding suspicious or unusual messages (SMS, phone calls, emails) appearing to come from ANTS
Exercise extreme caution about suspicious communications over SMS, voice, and emails
No specific action required from users according to ANTS
ANTS is notifying identified impacted individuals
Agency has notified CNIL (data protection authority), Paris Public Prosecutor, and involved ANSSI (national cybersecurity agency)
Affected products:
France Titres (ANTS) - ants.gouv.fr portal
Agence nationale des titres sécurisés portal
Related links:
https://ants.gouv.fr/toute-l-actualite/incident-de-securite-relatif-au-portail-antsgouvfr
https://x.com/IntCyberDigest/status/2046213739549167728
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
