https://cybernews.com/security/ants-hack-france-19-million-records-id-agency-breach
TL;DR:
The French government has confirmed that its database used to secure identity documents has been breached, exposing around 19 million records containing passport, national ID card, and driver’s license data.
- CYBER NEWS
And despite stories like these governments continue to push for digital ID and age verification online. SMH.
Is there another source than Cyber News ? They have a pretty spotty record on leaks.
Did you not see my post? I included 2 links. One from CyberNews, the other from The Record.
missed that sorry
Session and Telegram….
Serious question there: is there a single French company or public institution left that hasn’t leaked its users’ data yet?
The monthly “massive French breach” article is at this point less news than a recurring column, and half these orgs still treat security as a suggestion they’ll get to after the next incident.
A leaderboard of the survivors would probably fit on a post-it.
It would almost be funny if the fallout didn’t keep turning into identity theft, fake-cop scams and home invasions.
The French shooting federation leaked its members’ addresses a few months ago, and gun owners started getting fake “police” visits within weeks. Also not forget France is averaging one crypto-related kidnapping every 2.5 days, and starting January the tax office is receiving every crypto user’s full identity and transactions on a platter. What could possibly go wrong 
There should be a push for statutory penalties for data leaks along with a private right of action. Maybe then there would be a financial disincentive for retaining all this data.
Apparently, and I read that over a month ago, France is the most hacked country in Europe.
I really hope other countries are taking notes. I want the politicians to pay attention, and if not, I hope the people are pay attention and organize so they can pressure and compel their governments to reverse course on age verification.
Honestly I wouldn’t hold my breath.
In France nobody seems to care, I rarely see articles on the topic at all, and the few I do see just report the breach itself, never any follow-up on accountability or sanctions.
The CNIL hands out fines occasionally but nothing that actually changes behavior, and politicians keep pushing for more data collection (age verification, crypto reporting, digital ID) while the existing systems are already leaking.
When I told my French friends about Chat control I didn’t get much of a reaction either. I sent them links to contact their MEP, but I think only one of them actually did, and she doesn’t even live in France. I’m not giving up hope though. This is too important.
UPDATE!
The alleged hacker is 15 years old and has been arrested.
He turned 15 barely a month go!
I did not expect this twist. 
Graham Ivan Clark, stole 164 BTC from investor at 16, Twitter hack 2020 at 17
Jonathan James, U.S. DoD at 15
“Fern” has covered these on YouTube, if you’re curious. I’m sure there are others, but I learned about them there.
Interesting. Is it known what led to him getting compromised? Neither of the articles says anything about this.
Not as far as I know. But as you can see in the original post’s screenshot, there was a little manifesto that was quite braggy, and asked for offers for people who wanted to buy the data.
Although, the hacker included their Session ID, it’s very amateur to include a Telegram handle where they can be contacted. Also, with the strong likelihood of Session shutting down in July, they should have probably had better contact alternatives.
