What they're not telling you: France Titres, the government agency in France for issuing and managing administrative documents has disclosed a data breach after a threat actor claimed the attack and stealing citizen data. Also known as Agence nationale des titres sécurisés (ANTS), the administrative body operates under the French Ministry of the Interior, serving as the managing authority for official identity and registration documents in France. This includes driver’s licenses, national ID cards, passports, and immigration documents.
# THE TAKE: France's Cybersecurity Theater Just Collapsed The French government didn't "confirm" shit—they got caught. When ANSSI finally admitted the breach after weeks of radio silence, they were already bidding war material on dark web forums. That's not transparency; that's damage control theater. Here's what matters: A hostile actor didn't just access files. They walked through the front door while France's supposedly "world-class" infrastructure played defense. The agency that lectures EU nations on digital sovereignty got absolutely humiliated by someone probably running operations from a bedroom. The real scandal? They won't name the actor. Won't detail what's actually compromised. They'll talk about "ongoing investigations" while sensitive government data auctions itself to the highest bidder—likely foreign intelligence services. France's cybersecurity crown? Revoked. Their credibility on European digital security? Dead.
What the Documents Show
According to an announcement the agency published yesterday, the attack occurred last week, and while the investigation is still ongoing, several data types for an undisclosed number of individuals may have been exposed. “On Wednesday, April 15, 2026, the National Agency for Secure Documents (ANTS) detected a security incident that may involve the disclosure of data from individual and professional accounts on the ants.gouv.fr portal,” reads ANTS’s announcement . The types of data that may have been exposed are: ANTS stated that it is currently in the process of notifying those identified as impacted. The agency noted that the exposed information does not allow unauthorized access to its electronic portals. However, the same data can be used in phishing and social engineering attacks.
Follow the Money
“No action is required from users. However, they are advised to remain highly vigilant regarding any suspicious or unusual messages they may receive (SMS, phone calls, emails, etc.) that appear to come from ANTS,” the agency warned. ANTS has notified the data protection authority (CNIL), the Paris Public Prosecutor, and has also involved the national cybersecurity agency (ANSSI) in the response effort. The agency warned that the sale or dissemination of the data is illegal. On April 16, a threat actor using the moniker ‘breach3d’ claimed the attack on hacker forums claimed the attack on ANTS, alleging to be holding up to 19 million records. The threat actor claims that the stolen data contains full names, contact details, birth data, home addresses, account metadata, and gender and civil status.
What Else We Know
The data has been offered for sale for an undisclosed amount, so it has not been broadly leaked yet. ANTS saus that user do not need to take any action but recommends exercising "extreme caution" about suspicious or unusual communication over SMS, voice, and emails appearing to come from the agency. BleepingComputer has contacted ANTS to ask about the threat actor’s allegations, but we have not received a response as of publishing. Update 4/24 - ANTS published an update on the incident where the agency confirmed that 11.7 million accounts were impacted. AI chained four zero-days into one exploit that bypassed both renderer and OS sandboxes. A wave of new exploits is coming.
Primary Sources
- Source: Hacker News
- Category: Government Secrets
- Cross-reference independently — don't take our word for it.
Disclosure: NewsAnarchist aggregates from public records, API feeds (Federal Register, CourtListener, MuckRock, Hacker News), and independent media. AI-assisted synthesis. Always verify primary sources linked above.