French government’s internal messaging service Tchap was breached, with the National Cybersecurity Agency (ANSSI) flagging the intrusion on June 7. The Digital Affairs Directorate (DINUM), which created and runs the app, launched an investigation and blocked the offending account. Users received a warning that public‑room messages are not encrypted. The extent of data loss remains under review, and officials have not disclosed which files were accessed.

A hacker group later claimed responsibility, publishing some of the exfiltrated files. Among the leaks are hardcoded LDAP credentials and roughly 14 GB of documents, email addresses, meeting links and other organizational data shared by civil servants. DINUM also warned that public rooms store messages in clear text, urging caution with sensitive information.

Tchap, built on the Matrix protocol, launched in 2019 to give French public‑sector employees a homegrown alternative to commercial chat tools. The incident arrives as Paris phases out Windows and plans replacements for Zoom and Microsoft Teams, underscoring security risks in the nation’s drive for sovereign tech. The EU likewise plans to retire Google as its default search engine, favoring the French‑developed Quaint platform.