Industry - Data Breach
Executive Summary
French authorities have arrested a 15-year-old suspected of hacking the National Agency for Secure Documents (ANTS) and attempting to sell 12-18 million citizens' personal records on cybercriminal forums. The breach potentially exposed names, email addresses, birth dates, login credentials, and other personal details from the agency that processes applications for passports, national ID cards, and driver's licenses. The suspect, allegedly operating as "breach3d," faces up to seven years in pr...
What Happened
French authorities arrested a 15-year-old on April 25, 2026, suspected of hacking the National Agency for Secure Documents (ANTS), a government platform that processes applications for passports, national ID cards, and driver's licenses. The suspect, allegedly using the alias "breach3d," is accused of extracting between 12 and 18 million citizen records and advertising them for sale on cybercriminal forums in April 2026. ANTS confirmed unusual network activity and verified that the circulated data appeared authentic.
Who Is Affected
Between 12 and 18 million French citizens who have accounts with ANTS are potentially affected. The compromised data may include login credentials, names, email addresses, birth dates, account identifiers, postal addresses, phone numbers, and places of birth. Anyone who has applied for passports, national identity cards, residence permits, or driver's licenses through the agency could have their personal information exposed.
Why It Matters
This breach involves one of France's most sensitive government databases, affecting millions of citizens whose identity documents are managed through a single centralized system. The incident demonstrates that even state-run systems handling critical identity infrastructure remain vulnerable to intrusion by individual actors, including minors. The exposure of login credentials combined with comprehensive personal details creates significant risks for identity theft and credential-based attacks across other services where affected individuals may have reused passwords.
What You Should Do
If you have an ANTS account or have applied for French identity documents, immediately change your ANTS password and update passwords on any other accounts where you used the same or similar credentials. Monitor your email and phone for phishing attempts or suspicious communications referencing your personal details. Enable multi-factor authentication wherever possible on government services and other online accounts. Consider requesting official guidance from ANTS regarding whether your specific account was affected and what protective measures the agency recommends.
Summary generated from verified sources and reviewed before publication. How we summarize.
Sources
- France investigates 15-year-old over alleged hack of national ID agency
- France investigates 15-year-old over alleged hack of national ID agency - The Record from Recorded Future News
- France Investigates 15-Year-Old Over Alleged ANTS Agency Hack - SQ Magazine
- 15-year-old arrested in massive French Government data leak
- Sandhills Medical data breach may have exposed info of 78,000+ South Carolinians, state agency says - WLTX
- 78,000 impacted by data breach in South Carolina - WLTX