France probes compromise of gov messaging platform after account hijack

Jump to main content

Search

REG AD

security

France probes compromise of gov messaging platform after account hijack

Authorities say the breach only exposed public chat rooms, but alleged attacker claims to have accessed far more data

Carly Page

Carly<br>Page

Published<br>tue 9 Jun 2026 // 12:27 UTC

French officials are investigating a compromise of the government’s encrypted messaging service Tchap after attackers hijacked an account and gained access to public chat rooms.<br>The incident came to light on June 7 when France's National Cybersecurity Agency (ANSSI) detected suspicious activity on Tchap, the government's homegrown messaging service used across ministries and public sector organizations. The French Digital Affairs Directorate (DINUM), which operates the platform, said it immediately began investigating the compromise and moved to block the affected account.<br>French officials insist the damage was limited and said the attacker could only see messages posted in public chat rooms, which are accessible to all Tchap users. Private conversations, the government says, are encrypted, and their contents remain inaccessible even when an account is compromised.

REG AD

Not everyone is buying that version of events.

REG AD

A cyber criminal has claimed responsibility for the attack and said they were able to gain access after they “social engineered” a valid agent account associated with Tchap's education environment.<br>The alleged hacker claims they accessed more than 73,000 user accounts, 643,000 messages, nearly 60,000 media files, and hundreds of chat rooms. The post, shared by Dark Web Intelligence, also claimed user enumeration was possible through a directory search function and suggested the data included references to documents marked "Diffusion Restreinte," a French government restricted-distribution classification.

MORE CONTEXT

Uncle Sam considers buying a seat on the Titanic

Europe built sovereign clouds to escape US control. Then forgot about the processors

French prosecutors link 15-year-old to mega-breach at state’s secure document agency

Switzerland built a secure alternative to BGP. The rest of the world hasn't noticed yet

None of those claims have been independently verified, and DINUM's statement makes no mention of user directory exposure, restricted documents, or the volumes of data cited by the hacker.<br>What French officials have confirmed is that investigators are still working through logs to determine exactly which conversations were accessed and whether any data was exfiltrated. The agency has also notified France's data protection watchdog, CNIL, after determining that personal information may have been exposed through content shared in conversations accessible to the attacker.<br>“A message has been sent to all Tchap users reminding them that a public chat room can be found and joined by any user and that its content is not encrypted,” French officials added. “In accordance with Tchap's terms of service, no personal, sensitive, or confidential information should be exchanged in public chat rooms: such exchanges should be reserved for private chat rooms.”<br>Whether the incident amounts to a limited exposure of public chat rooms or something considerably larger will depend on what investigators find in the logs, but for now, the government and the attacker are telling very different stories. ®

france<br>data breach<br>tchap<br>security

REG AD

OFFBEAT

US Army picks out Vampire to fill a gap in its layered drone defenses

L3Harris supplies system that can down incoming drones with laser-guided rockets

AI AND ML

AI is code – and can't be prompted into being smarter

From Java tests to Shai-Hulud, bots keep proving they'll swallow anything you feed them

ZTE wins three Selular Award 2026 honors for AI-powered network innovation

PARTNER CONTENT: Recognized for breakthrough achievements in FWA, Network Ecosystem, and Native AI Baseband, ZTE solidifies its role as a key driver of Indonesia’s 5G-Advanced and AI economic growth

OFF-PREM

EU sovereignty push gives tech buyers a new alphabet soup to swallow

Brussels presses on despite US fury as it looks to enforce cloud autonomy and bolster open source

PAAS AND IAAS

Graviton 5 impresses, but please, for the love of all that's holy, stop calling them 'AI chips'

AWS better at running chip fabs than their mouths

personal tech

Scientists pour cold water on claims phones are rewiring kids' brains

MPs told that while concerns over handsets and social media grows, evidence they're changing children's brains is limited

MOST POPULAR

security

GitHub nukes 70+ Microsoft repos, breaks CI/CD pipelines, following suspected worm infections

Security

Angry bug hunter with Microsoft beef drops new Windows 0-day

Security

Signal says UK plan to scan devices for nude images 'endangers us all'

SECURITY

Every employee’s password was stored in a single Excel file

PERSONAL...