France’s Government Messaging App Tchap Got Breached
France’s Government Messaging App Tchap Got Breached
https://securityaffairs.com/193393/security/frances-government-messaging-app-tchap-got-breached.html
Publish Date: 2026-06-10 04:26:00
Source Domain: securityaffairs.com
France’s Government Messaging App Tchap Got Breached
Pierluigi Paganini
June 10, 2026
France’s government chat app Tchap was breached after a single account was compromised, exposing messages and data from public channels.
Tchap, the encrypted messaging platform developed by the French government for its civil servants and made mandatory last year, was breached on June 7. ANSSI, France’s cybersecurity agency, detected the intrusion. The vector was straightforward: someone compromised a user account and used it to access the platform. No sophisticated technical exploit, just a stolen account.
The attacker claimed responsibility over the weekend before the French Digital Affairs Directorate (DINUM) made any official announcement. They said they got in through a social engineering attack targeting the education shard, specifically matrix.agent.education.tchap.gouv.fr. Their own description of what they found is the more alarming part: they claim to have scraped nearly 650,000 messages, information on over 73,000 accounts, including email addresses and device metadata, and over 13.5GB of documents and media files.
Source: Frenchbreaches.com
They also allege they found hardcoded LDAP credentials leaked via a PowerShell script shared by a regional director of the French tax authority.
“I social engineered a valid account on the education shard (matrix.agent.education.tchap.gouv.fr). Everything below is what that one account could reach, other shards will have more,” reads the announcement made by the attackers.
🔴🇫🇷 ALERTE — La messagerie gouvernementale Tchap serait visée par une fuite de données impliquant plus de 73 000 agents de l’État, 643 000 messages et près de 3 ans d’échanges internes.
Tchap est la messagerie officielle de l’administration française. Elle est notamment… pic.twitter.com/jtiN0hS1LF
— Seb (@seblatombe) June 8, 2026
DINUM’s…
