A social engineering attack compromised a user account on the French government's Tchap messaging platform, which threat actors then used to exfiltrate over 13.5GB of documents and scrape data from over 73,000 accounts. The platform's administrator, DINUM, has blocked the compromised account and is investigating the breach, while reminding users that public chat rooms lack encryption. No specific software versions, CVSS scores, patches, or technical workarounds are provided in the source article.
Government security French government messaging platform Tchap breached via hijacked account June 9, 2026 Share By SC Staff Adobe Stock Hackers gained unauthorized access to Tchap, the French government's secure messaging platform, by exploiting a compromised user account. The breach was detected by the French Cybersecurity Agency (ANSSI) and reported by the digital affairs directorate (DINUM). The incident has prompted an alert to France's data protection authority due to potential exposure of personal data, as reported by Bleeping Computer. The attack on Tchap, a platform developed for the French public sector, reportedly involved a social engineering attack that compromised a user account. Threat actors claim to have accessed hardcoded LDAP credentials and exfiltrated over 13.5GB of documents and media files. They also allegedly scraped nearly 650,000 messages and data on over 73,000 accounts, including email addresses and metadata. DINUM has blocked the compromised account and is investigating the extent of the data accessed. Users have been reminded that public chat rooms are not encrypted and should not be used for sensitive information. This incident follows a previous data breach involving a French government agency last month. Source: Bleeping Computer SC Staff Related Government security Senator introduces bill to restore cybersecurity funding for state and local governments SC Staff June 5, 2026 The proposed "Guaranteeing Universal Access to Cybersecurity Act" seeks to authorize $50 million annually for the MS-ISAC, which is operated by the Center for Internet Security. Government security Anthropic deploys engineers to NSA to aid Mythos use SC Staff June 5, 2026 The deployment of Anthropic engineers to the NSA is intended to help the agency integrate and utilize the Mythos AI model for specific applications. AI/ML Trump executive order on AI calls for voluntary 30-day review period Steve Zurier June 3, 2026 Trump AI order proposes a 30-day voluntary review of frontier models before public release. Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe You can skip this ad in 5 seconds