French Agency Reports Potential Data Exposure as Hacker Claims 19 Million Records
Summary
France’s ANTS reported a security incident that may have exposed account and personal data. Actor breach3d claims to offer up to 19 million records for sale; the claim is unconfirmed, and the investigation continues.
Key points
- ANTS said it detected a security incident on April 15, 2026, that may have involved data from individual and professional accounts on ants[.]gouv[.]fr.
- Potentially exposed data includes login IDs, names, email addresses, birth dates, and account identifiers; some records may also include addresses, places of birth, and phone numbers.
- Actor breach3d claims to hold up to 19 million records and has offered them for sale. The article provides no independent confirmation of the actor’s claim.
- ANTS said the information does not allow access to its portals but could be used for phishing and social engineering.
- ANTS is notifying identified affected users and has involved CNIL, ANSSI, and the Paris Public Prosecutor; the investigation is ongoing.
Article Details
- Victim Organization
- France Titres (ANTS)
- Victim Domain
- ants.gouv.fr
- Incident Type
- Security incident with possible exposure of personal and account data; ANTS confirmed detecting the incident, while the extent of exposure and the alleged theft remain unconfirmed.
- Incident Date
- 2026-04-15
- Data Types Exposed
- Login IDs
- Full names
- Email addresses
- Dates of birth
- Unique account identifiers
- Postal addresses (for some individuals)
- Places of birth (for some individuals)
- Phone numbers (for some individuals)
- Contact details, account metadata, gender, and civil status (claimed by breach3d)
- Affected Records
- Up to 19 million records claimed by breach3d; ANTS has not confirmed this figure.
- Operational Impact
- ANTS said the potentially exposed information does not allow access to its electronic portals. The agency is notifying identified impacted users, and the investigation is ongoing. No service disruption was reported.
- Ransom Or Extortion
- breach3d claims to have stolen the data and offered it for sale for an undisclosed amount. The article says it had not been broadly leaked as of publication; no ransom demand was reported.
- Claim Status
- confirmed