France's government agency for secure identity documents has confirmed a data breach affecting millions of citizens. France Titres (Agence nationale des titres sécurisés) detected the security incident on April 15, 2026, and disclosed it publicly the following day. The agency manages driver's licenses, passports, national IDs, and immigration documents under the French Ministry of the Interior.

A threat actor using the moniker 'breach3d' claimed responsibility on hacker forums, asserting possession of up to 19 million records containing full names, contact details, birth data, home addresses, and account metadata. The data has been offered for sale but hasn't been broadly leaked yet.

Exposed information includes login IDs, full names, email addresses, dates of birth, unique account identifiers, and for some users, postal addresses, places of birth, and phone numbers. While ANTS stated the data doesn't allow unauthorized portal access, it could fuel phishing and social engineering attacks. The agency has notified CNIL, the Paris Public Prosecutor, and national cybersecurity agency ANSSI. Users aren't required to take action but should watch for suspicious communications.