Data Breach at ANTS Exposes Millions of French Citizens' Personal Information

Severity: High (Score: 64.5)

Sources: www.franceinfo.fr, Leparisien.Fr

Summary

On April 20, 2026, the French National Agency for Secure Titles (ANTS) suffered a data breach affecting approximately 11.7 to 19 million individuals. The breach involved the exfiltration of personal data, including names, addresses, and dates of birth, but did not include identity photos. The hacker, posing as Pablo Escobar, claimed responsibility and highlighted security vulnerabilities within ANTS. Victims reported not receiving any notifications regarding the breach. The Ministry of the Interior reassured the public that the stolen data does not allow unauthorized access to personal accounts on the agency's portal. The incident has raised concerns about potential phishing attacks targeting affected individuals. ANTS has stated that security measures have been enhanced following the breach. A source confirmed that the attack was linked to a technical vulnerability. Key Points: • The ANTS data breach potentially affects 11.7 to 19 million French citizens. • Personal data including names, addresses, and birth dates were compromised. • The hacker claimed to have exploited security vulnerabilities within ANTS.

Key Entities

• Data Breach (attack_type)
• France (country)
• T1041 - Exfiltration Over C2 Channel (mitre_attack)