The National Agency for Document Security of France (ANTS) faces an unprecedented security crisis after a massive cyberattack that has left its digital platform out of service. Authorities have confirmed that eleven point seven million accounts could have been affected by the intrusion, which constitutes a critical breach of sensitive data of French citizens.
The agency's portal has remained inaccessible since April 24 due to urgent maintenance and security system review work. This prolonged interruption has generated alarm among users who need to manage essential procedures related to identity documents and driving permits.
A teenager behind the alias breach3d
The police investigation has identified a 15-year-old French minor as the main suspect, arrested on April 25th by order of the Paris prosecutor's office. The young man operated under the alias breach3d on specialized forums where stolen data and hacking tools circulate.
The researchers maintain that the accused used artificial intelligence to build a false image of an experienced cybercriminal. This technology allowed him to gain credibility within these hidden digital communities.
In his publications, the user claimed to have accessed millions of personal records stored by the ANTS. Among the supposedly compromised information are full names, postal addresses, phone numbers, email addresses, and dates of birth.
"The young man claimed to be acting not for money, but for notoriety within these digital communities." - Paris Prosecutor's Office
The search for virtual reputation motivated his actions according to initial inquiries. The teenager even compared himself in some online exchanges to cybercriminal organizations known as Lapsus$, seeking to emulate their media impact.
Charges for attacks on automated systems
French justice has requested formal charges against the detainee for attacks against automated data processing systems. He is also charged with possession of computer tools specifically intended to commit this type of technological crime.
As it concerns a minor, the courts are now studying the application of judicial supervision measures appropriate to his condition. The case highlights the growing capacity for action of young individual actors in cyberspace.
The magnitude of the security breach forces authorities to verify the real integrity of the exposed data. Trust in state document management systems is temporarily suspended while the full extent of the harm caused to citizens is assessed.