French Authorities Detain 15-Year-Old Suspected in ANTS Data Breach

Summary
France detained a 15-year-old suspected of using “breach3d” to sell data from the confirmed ANTS breach. The agency reported 11.7 million affected accounts; exposed fields included contact and birth-date information. The suspect has not been formally charged.
Key points
- ANTS detected suspicious network activity on April 13 and notified authorities on April 16.
- The agency confirmed a breach involving accounts on the ants[.]gouv[.]fr portal and said 11.7 million accounts were affected.
- The exposed information included names, email addresses, dates of birth, postal addresses, and phone numbers.
- Authorities suspect the 15-year-old used the alias “breach3d” to offer 12–18 million records for sale; the agency said the data could not be used for unauthorized access.
- The suspect faces allegations including unauthorized access, persistence, data exfiltration, and possession of software enabling the offenses. The minor has not been formally charged.
Article Details
- Victim Organization
- France Titres (ANTS)
- Victim Domain
- ants.gouv.fr
- Incident Type
- Data breach involving unauthorized access to individual and professional accounts and alleged data exfiltration
- Data Types Exposed
- Full names
- Email addresses
- Dates of birth
- Postal addresses
- Phone numbers
- Affected Records
- ANTS confirmed 11.7 million impacted accounts. The suspected operator allegedly offered 12–18 million records for sale; a threat actor had claimed up to 19 million.
- Operational Impact
- ANTS detected suspicious network activity. The agency said the stolen data could not be used for unauthorized access; no other operational impact was reported.
- Ransom Or Extortion
- No ransom demand was reported. A suspected operator allegedly offered stolen records for sale on a cybercriminal forum.
- Claim Status
- confirmed
