Breaches · 134 days ago
A breach like this does not end when the agency contains it. Once names, birth dates, addresses, phone numbers, and email addresses are sold at this scale, the damage shifts to long-term fraud, impersonation, and resale across other criminal markets.
French authorities say a 15-year-old suspected of using the alias breach3d offered 12 million to 18 million records stolen from France Titres, the agency that issues and manages administrative documents. ANTS said the incident affected 11.7 million accounts on ants.gouv.fr and exposed personal data from individual and professional accounts, including full names, email addresses, dates of birth, postal addresses, and phone numbers.
The immediate breach may be contained, but the data set remains useful for years because it supports identity abuse even without account takeover. That makes government citizen-data leaks a persistent fraud asset, not a one-time disclosure.
4 sources covering this story
15-year-old detained over massive data breach at French government agency - Help Net Security
A 15-year-old suspect was detained over the France Titres data breach, with up to 18 million records reportedly sold online.
15-year-old detained over French govt agency data breach
French authorities have detained a 15-year-old suspected of selling data stolen in a cyberattack on France Titres (ANTS), the country's agency for issuing and managing administrative documents.
French prosecutors link 15-year-old to gov mega-breach
: Two computer crime allegations follow up to 18M lines of data surfacing online
The Record from Recorded Future
France investigates 15-year-old over alleged hack of national ID agency
The minor was taken into police custody on April 25 on suspicion of involvement in a data breach affecting the National Agency for Secure Documents (ANTS), which processes applications for passports, national identity cards, residence permits and driver’s licenses.
Part of the PlainSec briefing for 2026-05-05