France probes cyberattack on Interior Ministry

• French Interior Ministry hit by what officials describe as a very serious cyberattack targeting police systems.
• Authorities dispute hackers’ claims of a massive data breach as investigations intensify.

France’s Interior Ministry has been hit by a cyberattack described as “very serious”, after hackers gained access to several professional email accounts and penetrated internal software systems containing sensitive police files, according to reports by Libération.

The newspaper covered the incident in two separate investigations, outlining both the initial breach and subsequent developments, while comparing official accounts with claims made by the alleged attackers.

Read more: Florida governor candidate vows to protect right to criticize 'Israel'

Paris prosecutors have opened a criminal investigation and assigned the case to the National Office for the Fight Against Cybercrime. The national data protection authority has also been notified, as officials confirmed the incident is being handled at the highest level of government.

Minister confirms access to key databases

Interior Minister Laurent Nuñez acknowledged that the attackers were able to view “important” files, including databases related to criminal records and wanted persons.

He said technical investigations are still under way to determine the true scope of the breach and the volume of data that may have been accessed or extracted.

Read more: Viral 2013 Roya video shows young football star Odeh Fakhoury’s World Cup dream

According to Libération, the intrusion began with unauthorized access to a limited number of professional email inboxes. Login credentials were allegedly obtained and shared without encryption, allowing hackers to access police applications through the “Cheops” portal, a system used by authorized bodies to consult security and law enforcement databases.

Hackers claim retaliation

A group linked to hacking forums has claimed responsibility for the attack, alleging it obtained data on more than 16 million people and threatening to publish the information unless negotiations are opened with the French state.

The group framed the operation as “retaliation” following the arrest of individuals suspected of running the forum. However, authorities and cybersecurity experts have cast doubt on these claims, suggesting exaggeration or disinformation.

Experts cited by the newspaper noted signs that some screenshots released by the group may involve email address spoofing rather than sustained, deep access to ministry systems. Internal disputes among figures linked to hacking forums have further obscured the attackers’ true identity.

Emergency measures rolled out

In response, the Interior Ministry said it implemented urgent security measures, including mandatory two-factor authentication, disabling compromised accounts, and resetting passwords. These steps are being overseen by the National Agency for the Security of Information Systems.

Officials stressed that assessments of the breach and its potential security implications are ongoing.

New details emerge

In its follow-up report, Libération said authorities now believe the breach stemmed from the hacking of a small number of staff email accounts, which yielded access tokens allowing entry into internal police applications via the Cheops portal.

Only dozens of files were extracted, possibly fewer than 100. The ministry has categorically denied claims of a leak involving millions of records, though it acknowledged the incident remains deeply concerning given the sensitivity of the systems involved, according to the official version.

Paris prosecutors confirmed the investigation concerns an organized attack on a state information system. One suspect, a 22-year-old previously convicted in similar cases, has reportedly been detained.

A broader warning

While authorities continue to scrutinize the hackers’ claims, the case has highlighted the vulnerability of digital systems, even within some of the state’s most sensitive institutions.

As investigations continue, the incident underscores the growing challenge cyberattacks pose to national security and the escalating sophistication of threats targeting government infrastructure.