French Government's Tchap Messaging Platform Compromised in Security Breach
France's encrypted government messaging service Tchap was compromised on June 7, 2025, after an attacker used social engineering to hijack a valid government account. The French National Cybersecurity Agency (ANSSI) and the Digital Affairs Directorate (DINUM) are investigating, with officials stating only public chat rooms were exposed. The breach is significant because Tchap is used by over 300,000 French public sector employees and was mandated as a secure alternative to foreign apps like WhatsApp and Signal.
On June 7, 2025, ANSSI detected suspicious activity on Tchap, a Matrix-protocol-based messaging platform developed exclusively for French government use and launched in 2019. DINUM confirmed that the compromised account was identified and blocked, and that private conversations remain protected by end-to-end encryption. However, a threat actor using the alias 'misere' has claimed far broader access, alleging the exfiltration of approximately 13.5–14GB of data, including 73,467 user accounts, over 643,000 messages, nearly 60,000 shared media files, and hundreds of chat rooms. The attacker also claims to have accessed hardcoded LDAP credentials, email addresses, and documents marked with France's restricted-distribution classification 'Diffusion Restreinte,' though none of these claims have been independently verified. DINUM has notified France's data protection authority, CNIL, acknowledging that personal information may have been exposed through public chat room content. The incident is particularly sensitive given that French Prime Minister François Bayrou had mandated Tchap as the secure replacement for foreign messaging apps, and France is broadly pushing toward domestically developed digital infrastructure.
What's missing
It remains unclear how the social engineering attack was executed in detail, whether the LDAP credentials claimed by the attacker were genuine, and what specific remediation steps DINUM is taking beyond blocking the compromised account.
How coverage differed
All three outlets reported the core facts neutrally, but The Register placed greater emphasis on the unverified nature of the attacker's claims and the gap between official and hacker accounts, while Engadget and TechRadar gave more prominence to the attacker's specific data-volume assertions and broader context about France's digital sovereignty push.
What different sources said
- EngadgetCenter
The French government's internal messaging service was compromised in a security breach
- The RegisterCenter
France probes compromise of gov messaging platform after account hijack
- TechRadarCenter
French government internal messaging tool Tchap hit by data breach — but it doesn't know if any data was compromised
Related
UNRWA Fires 70 Gaza Staff Members, Denies Terminations Validate Hamas Allegations
The UN agency for Palestinian refugees, UNRWA, has dismissed 70 employees in Gaza with immediate effect, citing safety and security risks. The move follows a USAID investigation that referred over 100 UNRWA staff for suspension or dismissal, and longstanding Israeli allegations that significant portions of the agency's workforce have ties to Hamas. The firings mark a significant but contested step in addressing accusations that have dogged the agency since the October 7, 2023 attacks, while UNRWA insists the dismissals are not an admission of guilt.
China's Tungsten Export Controls Ripple Through Global Supply Chains, From AI Chips to Weapons
China's 2025 export restrictions on tungsten have triggered price surges, potential production halts at Japanese semiconductor gas manufacturers, and a push to revive domestic mining in the United States. Tungsten, of which China produces over 78 percent of global supply, is critical to both advanced AI chipmaking and military munitions. The disruptions are exposing deep vulnerabilities in Western and Asian supply chains for a material with few short-term substitutes.
Rain Delays Start of India vs Afghanistan 1st ODI in Dharamshala
Persistent drizzle has delayed the toss and cast doubt over the first ODI between India and Afghanistan at the Himachal Pradesh Cricket Association Stadium in Dharamshala. The meteorological department issued an orange alert for June 12 warning of thunderstorms and hail across parts of Himachal Pradesh, with a 60–70% chance of showers forecast throughout the day. The delay threatens what would have been a historically significant match — the first-ever bilateral ODI series between the two nations.