French Government Agency France Titres Discloses Data Breach; 19 Million Records Allegedly Stolen
**France Titres**, the French government agency responsible for issuing and managing administrative documents, has disclosed a data breach following claims by a threat actor who alleges to have stolen citizen data. The attacker, known as 'breach3d', claims to possess up to 19 million records and is offering the data for sale.
**France Titres**, also known as **Agence nationale des titres sécurisés (ANTS)**, which operates under the French Ministry of the Interior, serves as the managing authority for official identity and registration documents in France, including driver’s licenses, national ID cards, passports, and immigration documents, has confirmed a security incident.
According to an announcement by the agency, the attack occurred last week. While the investigation is ongoing, several data types for an undisclosed number of individuals may have been exposed.
html
<a rel="nofollow noopener" href="https://www.adaptivesecurity.com/demo/security-awareness-training?utm_source=display_network&utm_medium=paid_display&utm_campaign=2026_04_display_bleepingcomputer&utm_id=701Rd00000fE8REIA0&utm_content=970x250"><img alt="image" src="https://www.bleepstatic.com/c/a/as-tour-the-platform-970-x250.jpg"></a>
"On Wednesday, April 15, 2026, the National Agency for Secure Documents (**ANTS**) detected a security incident that may involve the disclosure of data from individual and professional accounts on the ants.gouv.fr portal," reads **ANTS’s** announcement.
### Data Potentially Exposed
The types of data that may have been exposed include:
* Login ID
* Full name
* Email address
* Date of birth
* Unique account identifier
* Postal address (for some)
* Place of birth (for some)
* Phone number (for some)
**ANTS** stated that it is currently notifying those identified as impacted. The agency clarified that the exposed information does not allow unauthorized access to its electronic portals. However, it warns that the data could be leveraged in phishing and social engineering attacks.
"No action is required from users. However, they are advised to remain highly vigilant regarding any suspicious or unusual messages they may receive (SMS, phone calls, emails, etc.) that appear to come from **ANTS**," the agency warned.
**ANTS** has notified the data protection authority (**CNIL**), the Paris Public Prosecutor, and has involved the national cybersecurity agency (**ANSSI**) in the response effort. The agency has also warned that the sale or dissemination of the data is illegal.
### Alleged Theft of 19 Million Records
On April 16, a threat actor using the moniker ‘breach3d’ claimed responsibility for the attack on hacker forums, alleging to hold up to 19 million records. The threat actor claims the stolen data contains full names, contact details, birth data, home addresses, account metadata, gender and civil status.
The data is being offered for sale for an undisclosed amount, and has not yet been publicly leaked. **ANTS** recommends exercising "extreme caution" regarding suspicious or unusual communication via SMS, voice, and emails appearing to originate from the agency.
BleepingComputer has contacted **ANTS** for comment regarding the threat actor’s allegations but has not yet received a response.
html
<div>
<h2><a rel="noopener nofollow" href="https://hubs.li/Q04crVgD0">99% of What Mythos Found Is Still Unpatched.</a></h2>
<p>AI chained four zero-days into one exploit that bypassed both renderer and OS sandboxes. A wave of new exploits is coming.</p>
<p>At the Autonomous Validation Summit (May 12 & 14), see how autonomous, context-rich validation finds what's exploitable, proves controls hold, and closes the remediation loop.</p>
<p><a rel="noopener nofollow" href="https://hubs.li/Q04crVgD0">Claim Your Spot</a></p>
</div>