France confirms data breach at government agency that manages citizens' IDs
by robtherobber on 4/23/2026, 3:59:55 PM
Comments
by: hk__2
> the data stolen in the breach could include full names, dates and places of birth, mailing and email addresses, and phone numbers on an undisclosed number of citizens<p>Nothing really new here sadly, this information about me have leaked half a dozen of times in the past 2-3 years or so. These things will never change if the only penalty the company/agency gets is "send a message to your users saying you are sorry and that it won’t happen again".
4/23/2026, 4:25:34 PM
by: loupol
I received the email telling me I am impacted today.<p>Ironically it changes nothing for me as that same data had already been leaked by the French government agency that handles unemployment benefits a couple years ago. Silly me had not bothered deleting that account even after it was no longer necessary due to finding a new job.
4/23/2026, 4:18:35 PM
by: rawgabbit
It seems to me we must move away from worrying about ransomware, data breach, data protection as that ship has already sailed and everyone's PII has already been stolen. We should think of how to verify people's identities online (for things like government benefits etc). I have heard of the Dutch and the Japanese using national digital identity systems although I am unclear how they work. India is doing biometrics. I am curious what the US will eventually land on.
4/23/2026, 4:25:05 PM
by: kleene_op
I find it especially ironic that they would leak all my data, given the fact that they would ask of me to forward them every piece of id imaginable whenever I needed to forge or amend a new one (when adding a mention on my driver's license for instance).<p>Like they didn't have access to it anyway.
4/23/2026, 4:51:24 PM
by: amelius
If governments are treating my personal data as if it is worth nothing, then I'm not going to treat copyrighted works as if they are worth something.<p>If you want to build a society on information, then you cannot forget the most important group.
4/23/2026, 4:57:36 PM
by: yubblegum
This shit should be stored encrypted not in plaintext.
4/23/2026, 5:50:45 PM
by: ahigherugliness
19 millions de Français! Et moi, et moi, et moi.
4/23/2026, 4:21:30 PM
by: pembrook
Important to remember: this is the competency level of basically all governments who are currently proposing you be required to identify yourself using their proprietary identity systems anytime you visit a website to "save the children."
4/23/2026, 5:36:06 PM
by: duncangh
It’s kind of interesting that this happens so shortly after they proudly announced how easily they would’ve able to migrate all systems from Microsoft and US firms. Maybe next year will be the year of the Linux desktop
4/23/2026, 5:10:46 PM
by: hmokiguess
C’est la vie.
4/23/2026, 4:43:08 PM
by: ChrisArchitect
Better link? <a href="https://www.bleepingcomputer.com/news/security/french-govt-agency-confirms-breach-as-hacker-offers-to-sell-data/" rel="nofollow">https://www.bleepingcomputer.com/news/security/french-govt-a...</a>
4/23/2026, 4:39:10 PM
by: cynicalpeace
A possible outcome of AI-assisted hacking is that companies, governments, and people become <i>more</i> resistant to using software, and software adoption actually declines.
4/23/2026, 4:38:04 PM
by: shevy-java
Governments may just be incompetent. Still, the lobbyists will never give up for mandatory age verification in the future.
4/23/2026, 5:02:15 PM
by: zh_code
Use Mythos!
4/23/2026, 4:40:24 PM
by: SilverElfin
Yet another example why NO ONE should trust age verification laws or companies like Anthropic forcing you to verify identity with shady companies like Persona (<a href="https://news.ycombinator.com/item?id=47872608">https://news.ycombinator.com/item?id=47872608</a>). Whatever info you give up, it’ll be exposed one day.
4/23/2026, 4:47:49 PM
by: buttersicle
[dead]
4/23/2026, 4:14:57 PM
by: abernard1
[dead]
4/23/2026, 4:43:59 PM
by: Zealotux
Great, now scammers can steal my identity directly from the government. I hope they release a tool to check if I'm impacted or at least email me about it.
4/23/2026, 4:12:20 PM
by: _the_inflator
I trust Google more than any government with my data. One needs security to survive the other couldn’t care less.<p>Google selling data? So far no one came to blackmail me for certain dispositions, while the other does as they want, IRS, foreign governments, social security whatever.<p>Google can be sued while the other gives itself a pass.<p>Who is the baddie?<p>In Germany the administration put massive duties on IT providers and added punitive damage as a looming consequence.<p>Fast forward and the government with its “Ha, we are so digital!” and “Europe is better than US in CS!” suddenly has to swallow some brutal medicine I guess.<p>I stick to my guns: Silicon Valley and especially Google is art regarding code and CS evolution. Same for FAANG etc.<p>EU is hubris to say the least.<p>Every time someone says “Let’s build our own Google/Cloud/…” a penguin dies.<p>E Invoice will be a brutal boomerang, XRechnung the greatest backdoor of all times.<p>Your data, time to shift everything into the EU.
4/23/2026, 4:33:06 PM