French Government Says Tchap Breach Affected 73,467 Users
Summary
France’s DINUM said Tchap was compromised via account hijacking on June 7, affecting 73,467 of more than 825,000 users. Actor “misere” claimed 13.5GB of files and messages were stolen, but that claim could not be verified.
Key points
- DINUM announced that France’s government messaging service Tchap was breached on June 7 following account hijacking.
- DINUM reported 73,467 affected accounts out of more than 825,000 registered users.
- DINUM said potentially exposed account details included names, email addresses, affiliated entities and avatars.
- An actor calling itself “misere” reportedly claimed theft of 13.5GB of files and data from more than 643,000 messages; the claim could not be verified because the original post was unavailable.
- The article says the additional theft claim was reported by the FrenchBreaches community, not independently confirmed.
- The article notes that exposed account and organizational details could support targeted spear-phishing, but presents this as a potential risk rather than a confirmed outcome.
Article Details
- Victim Organization
- French government (Tchap, operated by DINUM)
- Incident Type
- Data breach following account hijacking
- Incident Date
- 2026-06-07
- Disclosure Date
- 2026-06-08
- Data Types Exposed
- First and last names
- Email addresses
- Affiliated entities
- Avatars
- Chat messages (reportedly stolen; unverified)
- Affected Records
- DINUM reported 73,467 affected user accounts. The actor calling itself misere reportedly claimed theft of more than 70,000 accounts.
- Affected Data Size
- Misere reportedly claimed 13.5 GB of files; this claim is unverified. The article later refers to a hypothetical 3.5 GB exfiltration.
- Operational Impact
- Tchap was compromised and user account data was potentially exposed. No service disruption is reported.
- Claim Status
- confirmed