French Authorities Arrest 22-Year-Old Suspect in Interior Ministry Cyberattack
French authorities have arrested a 22-year-old man in connection with a cyberattack on the country’s Interior Ministry, which compromised internal email systems and sensitive files. The suspect, born in 2003, was taken into custody on December 17, 2025, following an investigation led by the cybercrime unit of the Paris prosecutor’s office. He faces charges of unauthorized access to a state-run automated data processing system, an offense punishable by up to 10 years in prison.
The breach was detected between December 11 and 12, 2025, with attackers gaining access to document files, including criminal records. While French Interior Minister Laurent Nuñez confirmed the severity of the incident, he noted that the full extent of the compromise remains unclear, emphasizing that millions of records were not extracted—though he cautioned against underestimating the breach.
The suspect has a prior conviction in 2025 for similar cyber offenses, though authorities have not disclosed further details about his identity or past cases. The investigation, conducted by France’s Office for Combating Cybercrime (OFAC), suggests the attack may have been carried out as part of an organized group.
Following the breach, the Interior Ministry strengthened access controls and notified France’s data protection authority (CNIL). The attack’s origin remains undetermined, with possibilities ranging from foreign interference to cybercriminal activity or hacktivism.
Online claims of responsibility emerged on an underground forum, with a post referencing retaliation for the 2025 arrests of five BreachForums moderators, including figures linked to the ShinyHunters hacking group. However, authorities have not confirmed a direct connection between the suspect and these claims. The investigation is ongoing, with further updates expected after the suspect’s 48-hour police custody period.
Source: https://thecyberexpress.com/french-interior-ministry-cyberattack/
French Ministry for Armed Forces cybersecurity rating report: https://www.rankiteo.com/company/french-ministry-of-armed-forces
"id": "FRE1766044507",
"linkid": "french-ministry-of-armed-forces",
"type": "Cyber Attack",
"date": "12/2025",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of geographical region"{'affected_entities': [{'industry': 'Public Sector',
'location': 'France',
'name': 'French Ministry of the Interior',
'type': 'Government'}],
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Criminal records',
'Document files']},
'date_detected': '2025-12-12',
'date_publicly_disclosed': '2025-12-17',
'description': 'French authorities arrested a 22-year-old man in connection '
"with a cyberattack on the French Interior Ministry's internal "
'email systems. The breach involved unauthorized access to '
'document files, including criminal records, and was detected '
'overnight between December 11 and December 12, 2025.',
'impact': {'data_compromised': 'Criminal records and document files',
'identity_theft_risk': 'High (due to criminal records exposure)',
'operational_impact': 'Strengthened access controls and security '
'protocols implemented',
'systems_affected': 'Internal email servers'},
'investigation_status': 'Ongoing',
'motivation': ['Revenge', 'Demonstration of Capability', 'Cybercrime'],
'references': [{'date_accessed': '2025-12-17',
'source': 'French Ministry of the Interior Press Release'},
{'date_accessed': '2025-12-17',
'source': 'Franceinfo Radio Interview with Laurent Nuñez'},
{'date_accessed': '2025-12-17',
'source': 'RTL Radio Interview with Laurent Nuñez'},
{'source': 'Underground Forum Post Claiming Responsibility'}],
'regulatory_compliance': {'legal_actions': 'Arrest and investigation (up to '
'10 years imprisonment)',
'regulations_violated': ['Unauthorized access to a '
'state-run automated '
'personal data processing '
'system'],
'regulatory_notifications': 'CNIL (National '
'Commission for '
'Information Technology '
'and Civil Liberties)'},
'response': {'communication_strategy': 'Public statements via press releases '
'and media interviews',
'containment_measures': 'Strengthened access controls',
'incident_response_plan_activated': 'Yes',
'law_enforcement_notified': 'Yes (Paris prosecutor’s office, '
'OFAC)'},
'stakeholder_advisories': 'CNIL notified; judicial and administrative '
'investigations underway',
'title': 'French Interior Ministry Cyberattack',
'type': 'Unauthorized Access'}