France is investigating a cyberattack on Tchap, the internal messaging platform developed for public workers. The service stands out for its encrypted communication and has been presented as part of France’s push toward domestic digital solutions and digital sovereignty.
On June 7, the French National Cybersecurity Agency confirmed that the platform had been compromised. France’s Directorate for Digital Affairs then launched a wide investigation. Officials said they identified the account used in the intrusion and blocked its access.
The central questions remain what data the attackers were able to reach and how much information may have been leaked. Users of the service received a warning message after the incident. It specifically noted that content shared in public chat rooms is not covered by end-to-end encryption, so those messages are also being examined as part of the inquiry.
French authorities have not issued a formal statement on the source of the breach. However, a threat actor has claimed responsibility, shared alleged files, and said it gained access to hard-coded LDAP credentials. The same claim said roughly 14 GB of documents and files were stolen, including email addresses, meeting links, and information about organizational structures.