France confirms identity document agency hack

The French Interior Ministry has disclosed a cyberattack against the country's National Agency for Secure Documents' ANTS platform, which is being used for driver's license, passport, and ID issuance, according to Security Affairs.

Information potentially exposed by the breach included names, birthdates, phone numbers, addresses, and account and login IDs, according to the Interior Ministry, which emphasized that uploaded documents and user account access were unaffected. Investigation into the attack, which has already been reported to the French Data Protection Authority, or CNIL, is already underway.

Such a confirmation comes as a threat actor advertised the sale of a stolen ANTS database that purportedly contains 18 to 19 million records with account metadata, names, phone numbers, emails, addresses, and birth details on a hacking forum. The legitimacy of the attacker's claim has not been verified. Users have been urged to keep an eye out for suspicious emails, messages, or calls.