France Titres (ANTS) Data Breach
The 2026 France Titres (ANTS) data breach concerns a security incident affecting the ants.gouv.fr portal, which supports French identity-document, passport, driving-licence and vehicle-registration services.
Exposed Data Types
9- Usernames
- Salutations
- Names
- Email addresses
- Dates of birth
- User account identifiers
- Physical addresses
- Places of birth
- Phone numbers
About This Breach
The agency said some information from individual and professional accounts may have been disclosed.
France Titres, formerly the Agence nationale des titres sécurisés (ANTS), is a French national public agency under the Ministry of the Interior.
When was the incident detected?
France Titres detected the incident on April 15, 2026. The precise start of unauthorized access has not been published, so this entry uses the earliest confirmed detection date as the event date. The Interior Ministry issued its first statement on April 20 and a detailed update on April 21.
What information may have been affected?
Individual accounts may have included login identifiers, salutations, names, email addresses, dates of birth and unique account identifiers. Some accounts also contained postal addresses, places of birth and phone numbers. The agency said supporting documents submitted during applications and biometric data were not disclosed. It did not state that passwords were obtained.
How many accounts were affected?
France Titres' April 21 update said approximately 11.7 million individual accounts may have been affected. This is an account estimate published while the investigation was continuing, not a finalized count of unique people.
What did the agency do?
France Titres began a technical investigation, notified affected users and reported the incident to the CNIL and the Paris public prosecutor. The investigation was assigned to France's anti-cybercrime office. Users were asked to change their passwords at their next login.
What should affected users do?
Users should be cautious about suspicious email, text messages and calls that appear to come from ANTS, and verify addresses before following links. Passwords reused on other services should also be replaced with unique passwords.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
