France’s National Agency for Document Security: More than 11.7 million accounts could be compromised by the cyberattack on ANTS and the platform remains down since April 24

French Government Agency Hit by Massive Cyberattack: 11.7 Million Accounts Potentially Exposed

France’s National Agency for Document Security (ANTS) is grappling with a severe cybersecurity breach after a cyberattack forced its digital platform offline, potentially compromising the personal data of 11.7 million citizens. The agency’s portal has been inaccessible since April 24, disrupting critical services for identity documents and driving permits.

Authorities identified a 15-year-old French minor, operating under the alias breach3d, as the primary suspect. Arrested on April 25 by the Paris prosecutor’s office, the teenager allegedly used artificial intelligence to fabricate an image of an experienced hacker, gaining credibility in underground forums where stolen data and hacking tools are traded.

According to investigators, the suspect claimed to have accessed full names, postal addresses, phone numbers, email addresses, and dates of birth from ANTS databases. The Paris Prosecutor’s Office stated that the attack was motivated not by financial gain but by a desire for notoriety within hacking communities, with the teen comparing himself to high-profile groups like Lapsus$.

French authorities have filed charges against the minor for attacks on automated data processing systems and possession of hacking tools. Given his age, the courts are evaluating appropriate judicial supervision measures. The incident underscores the rising threat posed by young, individual cyber actors leveraging advanced techniques.

As authorities assess the full extent of the breach, public trust in France’s document management systems remains shaken. The investigation continues to determine the actual integrity of the exposed data and the long-term impact on affected citizens.

Source: https://www.apd.cat/en/data-protection/more-than-11-7-million-accounts-could-be-compromised-by-the-cyberattack-on-ants-and-the-platform-remains-down-since-april-24_10388_102.html

IN Groupe cybersecurity rating report: https://www.rankiteo.com/company/in-groupe

"id": "IN-1777832929",
"linkid": "in-groupe",
"type": "Breach",
"date": "4/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '11.7 million citizens',
                        'industry': 'Public Sector',
                        'location': 'France',
                        'name': 'National Agency for Document Security (ANTS)',
                        'type': 'Government Agency'}],
 'data_breach': {'number_of_records_exposed': '11.7 million',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High (Personally Identifiable '
                                        'Information)',
                 'type_of_data_compromised': ['Full names',
                                              'Postal addresses',
                                              'Phone numbers',
                                              'Email addresses',
                                              'Dates of birth']},
 'date_detected': '2024-04-24',
 'description': 'France’s National Agency for Document Security (ANTS) is '
                'grappling with a severe cybersecurity breach after a '
                'cyberattack forced its digital platform offline, potentially '
                'compromising the personal data of 11.7 million citizens. The '
                'agency’s portal has been inaccessible since April 24, '
                'disrupting critical services for identity documents and '
                'driving permits.',
 'impact': {'brand_reputation_impact': 'Public trust in France’s document '
                                       'management systems shaken',
            'data_compromised': '11.7 million accounts',
            'downtime': 'Since April 24',
            'identity_theft_risk': 'High',
            'operational_impact': 'Disruption of critical services for '
                                  'identity documents and driving permits',
            'systems_affected': 'ANTS digital platform'},
 'investigation_status': 'Ongoing',
 'motivation': 'Notoriety within hacking communities',
 'references': [{'source': 'Paris Prosecutor’s Office'}],
 'regulatory_compliance': {'legal_actions': 'Charges filed for attacks on '
                                            'automated data processing systems '
                                            'and possession of hacking tools'},
 'response': {'law_enforcement_notified': 'Yes (Paris prosecutor’s office)'},
 'threat_actor': '15-year-old French minor (alias: breach3d)',
 'title': 'French Government Agency Hit by Massive Cyberattack: 11.7 Million '
          'Accounts Potentially Exposed',
 'type': 'Data Breach'}