France’s ANTS ID System website hit by cyberattack, possible data breach

On April 15, 2026, France’s National Agency for Secure Documents (ANTS) detected a security incident that may have exposed personal and professional account data for applicants of passports, ID cards, residence permits, and driver’s licenses. Reported exposed fields include login ID, name, email, date of birth, account ID and, in some cases, address, place of birth, and phone number; uploaded documents and direct account access were reportedly not exposed. A threat actor claims to be selling ~18–19 million records; authorities have notified CNIL, prosecutors, and the national cybersecurity agency and are investigating. If confirmed, the leak could enable large-scale identity theft, financial fraud, and creation of synthetic identities.