French Teen Detained for Massive Government Data Breach
▼ Summary
– French authorities detained a 15-year-old suspected in a data breach at France Titres, the agency issuing official documents.
– A hacker known as “breach3d” offered 12 to 18 million data records for sale on cybercriminal forums.
– ANTS detected suspicious activity on April 13, confirmed the data’s authenticity, and the cybercrime unit opened an investigation on April 16.
– The leaked data included ID numbers, names, emails, dates of birth, account identifiers, and some records with addresses and phone numbers.
– The minor faces charges for unauthorized access, data extraction, disruption of a state system, and possessing related software, with a penalty of up to seven years and a €300,000 fine.
French authorities have taken a 15-year-old into custody on suspicion of orchestrating a massive data breach at France Titres, the government body that handles the issuance of official documents like passports and identity cards.
The Paris Prosecutor’s Office revealed in a statement that between 12 and 18 million data records were allegedly put up for sale on cybercriminal forums by a hacker using the alias “breach3d.” The breach first came to light when ANTS, the agency overseeing France Titres, detected unusual activity on its network on April 13. Officials later confirmed the stolen data was genuine. The Paris prosecutor’s cybercrime unit was notified on April 16, launching a formal investigation.
The agency publicly disclosed the incident on April 20, explaining that the compromised data included ID numbers, names, email addresses, dates of birth, and unique account identifiers. In some cases, records also contained postal addresses, places of birth, and phone numbers.
Prosecutors emphasized the severity of the offense, noting it carries a potential penalty of up to seven years in prison and a €300,000 fine. The minor is expected to face charges related to unauthorized access, data extraction, and disruption of a state-run system, as well as possession of tools or software designed to commit such crimes.
(Source: Help Net Security)