[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYX34g3S1viZEDJIfoJ3UGeJTVPjSU0VCRD9El-26om8":3},{"article":4,"iocs":48},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":27,"category":28,"article_tags":32},"72f1f2a7-1161-4548-8d0a-1c6ec0691bc8","French prosecutors link 15-year-old to gov mega-breach","french-prosecutors-link-15-year-old-to-gov-mega-breach-c3e981",": Two computer crime allegations follow up to 18M lines of data surfacing online","French prosecutors detained a 15-year-old suspect, allegedly using the online alias 'breach3d', over the theft of between 12–18 million records from France Titres (ANTS), the state agency handling passports and ID cards. The data, containing login IDs, names, emails, dates of birth, addresses, and phone numbers, was advertised for sale on cybercrime forums and potentially affects roughly one-third of France's population. The suspect faces two computer crime charges, each carrying up to seven years imprisonment and €300,000 in fines.","French prosecutors charge 15-year-old with stealing 18M records from national secure documents agency ANTS.","Cyber-crime French prosecutors link 15-year-old to mega-breach at state’s secure document agency Two computer crime allegations follow up to 18M lines of data surfacing online Connor Jones Thu 30 Apr 2026 \u002F\u002F 16:39 UTC French prosecutors say police detained a 15-year-old on April 25 over the alleged theft of millions of records from France Titres (ANTS), the agency handling secure documents. The Paris Prosecutor's Office announced on Thursday that the minor, suspected of using the online alias \"breach3d\" and not named because French law protects minors, faces two computer crime allegations linked to an intrusion in which between 12 million and 18 million lines of data were offered for sale on cybercrime forums. It formally opened a judicial investigation on April 29, covering alleged fraudulent access to a state-run automated data processing system and the extraction of data from it. \u003Ca href=\"https:\u002F\u002Fpubads.g.doubleclick.net\u002Fgampad\u002Fjump?co=1&iu=\u002F6978\u002Freg_security\u002Fcybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2afOL_x6nwSkgaCfOevRN_wAAAJE&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" target=\"_blank\"> \u003Cimg src=\"https:\u002F\u002Fpubads.g.doubleclick.net\u002Fgampad\u002Fad?co=1&iu=\u002F6978\u002Freg_security\u002Fcybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2afOL_x6nwSkgaCfOevRN_wAAAJE&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" alt=\"\"> \u003C\u002Fa> Each offense carries a potential prison sentence of seven years and a maximum €300,000 (~$350,000) fine. \u003Ca href=\"https:\u002F\u002Fpubads.g.doubleclick.net\u002Fgampad\u002Fjump?co=1&iu=\u002F6978\u002Freg_security\u002Fcybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44afOL_x6nwSkgaCfOevRN_wAAAJE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" target=\"_blank\"> \u003Cimg src=\"https:\u002F\u002Fpubads.g.doubleclick.net\u002Fgampad\u002Fad?co=1&iu=\u002F6978\u002Freg_security\u002Fcybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44afOL_x6nwSkgaCfOevRN_wAAAJE&t=ct%3Dns%26unitnum%3D426raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" alt=\"\"> \u003C\u002Fa> \u003Ca href=\"https:\u002F\u002Fpubads.g.doubleclick.net\u002Fgampad\u002Fjump?co=1&iu=\u002F6978\u002Freg_security\u002Fcybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33afOL_x6nwSkgaCfOevRN_wAAAJE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" target=\"_blank\"> \u003Cimg src=\"https:\u002F\u002Fpubads.g.doubleclick.net\u002Fgampad\u002Fad?co=1&iu=\u002F6978\u002Freg_security\u002Fcybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33afOL_x6nwSkgaCfOevRN_wAAAJE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" alt=\"\"> \u003C\u002Fa> Public Prosecutor Laure Beccuau has requested that the minor, whose pronouns, like their name, were also not specified, be formally charged and placed under judicial supervision. Beccuau said that France's office against cybercrime (OFAC) was informed in April of a cyberattack against ANTS, which handles passports, ID cards, and other secure documents, and that ANTS confirmed the reports on April 13. \u003Ca href=\"https:\u002F\u002Fpubads.g.doubleclick.net\u002Fgampad\u002Fjump?co=1&iu=\u002F6978\u002Freg_security\u002Fcybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44afOL_x6nwSkgaCfOevRN_wAAAJE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" target=\"_blank\"> \u003Cimg src=\"https:\u002F\u002Fpubads.g.doubleclick.net\u002Fgampad\u002Fad?co=1&iu=\u002F6978\u002Freg_security\u002Fcybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44afOL_x6nwSkgaCfOevRN_wAAAJE&t=ct%3Dns%26unitnum%3D426raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" alt=\"\"> \u003C\u002Fa> The Paris Public Prosecutor's Office was notified three days later and launched an investigation into the case the same day. Public confirmation of the attack came from the French Interior Ministry on April 20, although it revealed no details about the suspected culprit. French police detained the 15-year-old on April 25, and prosecutors announced [PDF] on Thursday that they were seeking formal charges and judicial supervision. The seller using the alias \"breach3d\" initially advertised the data trove as containing 18-19 million records – slightly above the upper range cited by Beccuau on Thursday – and the types of data offered for sale aligned with what the Interior Ministry had described. France's digital directorate dumping Windows desktops, adopting Linux instead France buys nuclear supercomputing spinoff Bull from Atos for €404M French cops free mother and son after 20-hour crypto kidnap ordeal Mistral boasts code-proofing agent offers champagne performance on a budget bière These were: login IDs, full names, email addresses, dates of birth, unique account identifiers, postal addresses, and telephone numbers, but not any attachments such as scans or photos. If the scale claimed by breach3d holds up, and if the records each pertained to unique individuals, this would constitute a breach affecting roughly a third of France's population. \u003Ca href=\"https:\u002F\u002Fpubads.g.doubleclick.net\u002Fgampad\u002Fjump?co=1&iu=\u002F6978\u002Freg_security\u002Fcybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33afOL_x6nwSkgaCfOevRN_wAAAJE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" target=\"_blank\"> \u003Cimg src=\"https:\u002F\u002Fpubads.g.doubleclick.net\u002Fgampad\u002Fad?co=1&iu=\u002F6978\u002Freg_security\u002Fcybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33afOL_x6nwSkgaCfOevRN_wAAAJE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" alt=\"\"> \u003C\u002Fa> France's approach to punishing minors via its legal system is typically geared toward re-education and rehabilitation rather than prison time. While those aged between 13 and 16 can face time in juvenile detention, it is often used as a last resort measure. The maximum sentences and fines for the charges the 15-year-old in this case faces are upper limits imposed on adult offenders, and would likely be lowered substantially in cases involving a minor, like this one. ® \u003Cstrong>Get our\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwhitepapers.theregister.com\u002F\" style=\"text-transform:uppercase\">Tech Resources\u003C\u002Fa> Share More about Cybercrime France More like these × More about Cybercrime France Narrower topics ESA NCSC Paris Broader topics EMEA Europe European Union Security More about Share POST A COMMENT More about Cybercrime France More like these × More about Cybercrime France Narrower topics ESA NCSC Paris Broader topics EMEA Europe European Union Security TIP US OFF Send us news","https:\u002F\u002Fwww.theregister.com\u002F2026\u002F04\u002F30\u002Ffrench_gov_mega_breach_suspect\u002F","https:\u002F\u002Fregmedia.co.uk\u002F2022\u002F02\u002F10\u002Fshutterstock_paris_france.jpg","2026-04-30T16:44:59+00:00","2026-04-30T17:00:10.178+00:00",8,[18,21,24],{"name":19,"type":20},"France Titres (ANTS)","product",{"name":22,"type":23},"French Interior Ministry","vendor",{"name":25,"type":26},"breach3d","threat_actor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":27,"icon":29,"name":30,"slug":31},null,"Breaches","breaches",[33,38,43],{"category":34},{"id":35,"icon":29,"name":36,"slug":37},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":39},{"id":40,"icon":29,"name":41,"slug":42},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":44},{"id":45,"icon":29,"name":46,"slug":47},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",[]]