[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1zkyrce4wtejc":3,"$f26z9lyfeeuilj":63},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"publishedAt":13,"modifiedDate":13,"contentUpdatedAt":13,"source":14,"sourceUrl":15,"sourceUrls":16,"pwnCount":18,"affectedCount":18,"affectedCountStatus":19,"affectedCountLowerBound":20,"affectedCountUnit":21,"hasEnglishDescription":4,"contentLocale":22,"availableLocales":23,"translations":33,"severity":44,"dataClasses":45,"description":52,"seoTitle":53,"seoDescription":54,"logoUrl":55,"isVerified":4,"isSensitive":4,"isSpamList":56,"isMalware":56,"company":57},"6a66a90d52ffbd1c6b76bf25","Tchap2026","Tchap 2026年数据泄露事件","tchap-2026","tchap.gouv.fr","2026-06-07T00:00:00.000Z","2026-07-27T00:40:45.981Z","2026-10-09T21:27:26.240Z","Compromised Tchap account used for malicious data access","https:\u002F\u002Fwww.numerique.gouv.fr\u002Fsinformer\u002Fespace-presse\u002Fincident-tchap\u002F",[15,17],"https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Ffrench-govt-says-tchap-breach-affected-over-73-000-accounts\u002F",73467,"known",null,"unknown","zh",[24,25,22,26,27,28,29,30,31,32],"en","tr","hi","es","ar","fr","bn","pt","ru",{"en":34,"tr":35,"zh":36,"hi":37,"es":38,"ar":39,"fr":40,"bn":41,"pt":42,"ru":43},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},"Medium",[46,47,48,49,50,51],"First names (potentially exposed)","Last names (potentially exposed)","Email addresses (potentially exposed)","Public-sector entities (potentially exposed)","Avatars (potentially exposed)","Public chat room content (potentially accessed)","\u003Cp>\u003Cstrong>Tchap 2026年数据泄露事件\u003C\u002Fstrong>是指攻击者通过一个遭入侵的用户账户，未经授权访问了法国政府面向公共部门工作人员的消息平台。法国跨部委数字事务局 DINUM 确认，2026年6月7日，一个 Tchap 账户遭到入侵，攻击者能够访问公共聊天室中分享的信息。\u003C\u002Fp>\n\u003Cp>DINUM 更新后的官方声明称，在超过825,000名注册公职人员中，73,467人可能受到影响，占注册用户总数的比例不到百分之九。至少可以访问的信息包括姓氏、名字、电子邮件地址、所属公共部门机构和头像。加密的私密会话内容仍受到保护，而公共聊天室中的消息按设计并不加密。\u003C\u002Fp>\n\u003Ch2>事件是如何得到确认的？\u003C\u002Fh2>\n\u003Cp>DINUM 表示，与 ANSSI 协同开展的调查发现，一个 Tchap 用户账户在被冒用或遭入侵后受到滥用。调查人员识别出发起恶意请求的账户，并立即将其封禁，切断了攻击者的持续访问权限。由于个人数据可能已经暴露，该事件已向法国数据保护机构 CNIL 报告。\u003C\u002Fp>\n\u003Cp>这份官方声明证实，平台已实际遭到入侵，而非仅有攻击者的说法或发现了漏洞。公开说明并未确切指出该账户是如何被接管的；有关社会工程手段的解释来自攻击者。因此，LeakData 不将任何具体的网络钓鱼手法、恶意软件、漏洞或威胁组织认定为已核实的原因。\u003C\u002Fp>\n\u003Ch2>73,467名用户这一数字意味着什么？\u003C\u002Fh2>\n\u003Cp>DINUM 表示，根据可访问的账户信息和公共会话范围，73,467名公职人员可能受到影响。这并非平台上超过825,000名注册用户的全部，而是占总数不到百分之九的一部分。\u003C\u002Fp>\n\u003Cp>“可能受到影响”并不意味着每位用户的每个字段都被查看或提取。DINUM 表示，仍在审查事件日志以及攻击者能够访问的会话。如果后续官方更新公布了经确认、去重或缩小范围后的受影响人数，则可据此修订本记录。\u003C\u002Fp>\n\u003Ch2>哪些数据可能已经暴露？\u003C\u002Fh2>\n\u003Cp>DINUM 表示，可能暴露的用户账户数据至少包括姓氏、名字、电子邮件地址、每位用户所属的公共部门机构以及头像。公共聊天室中的消息，以及用户在攻击者可访问的聊天室中分享的内容，也属于此次事件的范围。这些数据类别涵盖已确认至少可访问的账户字段，以及可能被访问的公共聊天室内容。\u003C\u002Fp>\n\u003Cp>官方调查尚未确定被窃取数据的完整情况。攻击者还声称涉及会议链接、设备元数据、数十万条消息、文档或硬编码凭据，但这些额外说法并未得到独立取证结果的证实。\u003C\u002Fp>\n\u003Ch2>公共会话与私密会话的区别\u003C\u002Fh2>\n\u003Cp>Tchap 同时支持公共会话和私密会话。DINUM 表示，私密会话经过加密，即使用户账户遭到入侵，其历史内容仍无法被访问。攻击者可能访问的范围仅限于公共会话；按照设计，所有 Tchap 用户都能找到并加入这些会话，其中的消息并不加密。\u003C\u002Fp>\n\u003Cp>聊天室向平台用户开放，并不意味着允许恶意自动收集个人数据，或将个人数据从其原有上下文中移走。此次事件被视为数据泄露，是因为遭入侵的账户通过恶意请求维持访问，并在未经授权的情况下收集信息。本记录也明确排除了“加密的私密消息已经暴露”这一错误结论。\u003C\u002Fp>\n\u003Ch2>DINUM 的应对措施\u003C\u002Fh2>\n\u003Cp>DINUM 封禁了发起恶意请求的账户，切断了攻击者的访问，并开始与专业团队共同审查事件日志。该机构与 ANSSI 协同处置，通知了 CNIL，并提醒所有 Tchap 用户，公共聊天室可被找到、可供加入，且其中的消息未经加密。诊断和补救工作仍在继续，以确定攻击方式及所需的防护措施。\u003C\u002Fp>\n\u003Cp>该机构再次强调，不得在公共聊天室中分享个人信息、敏感信息或工作保密信息，此类信息应仅在私密会话中交流。用户应检查异常会话和身份验证请求，核实以其所在组织名义发送的消息，并留意针对已披露电子邮件地址的网络钓鱼。这些预防措施与已确认可访问的账户及雇主信息字段相对应。\u003C\u002Fp>\n\u003Ch2>应如何理解此次事件？\u003C\u002Fh2>\n\u003Cp>73,467是官方公布的可能受影响公职人员人数上限。名字、姓氏、电子邮件地址、所属机构和头像，是至少可访问的账户字段；被提取的公共聊天室消息总量仍在调查中。\u003C\u002Fp>\n\u003Cp>已核实的影响范围是：加密的私密会话及其历史内容仍受到保护，影响仅限于公共聊天室及相关用户信息。攻击者身份、账户接管手法以及被窃取内容的完整情况均未披露。未经核实的人数、数据字段和威胁行为者说法，不纳入本次公开披露事件的范围。\u003C\u002Fp>","Tchap 2026年数据泄露事件 (73.5 千 已报告记录数)","Tchap 2026年数据泄露事件. 据报告，涉及73.5 千条记录。 已报告的数据：First names (potentially exposed), Last names (potentially exposed), Email addresses (potentially exposed)。…","\u002Fuploads\u002Flogo\u002Ftchap_gouv_fr.png",false,{"name":58,"sector":59,"country":60,"website":61,"websiteArchiveUrl":62,"websiteStatus":62,"websiteCheckedAt":20},"Direction interministérielle du numérique (DINUM)","Government","France","numerique.gouv.fr","",{"success":4,"breaches":64},[65,71,79,85],{"slug":66,"title":67,"companyName":68,"logoUrl":69,"breachDate":70,"affectedCount":20,"affectedCountStatus":21},"liechtenstein-beneficial-owners-register-2026","2026年列支敦士登受益所有人登记册数据泄露事件","Liechtenstein Office of Justice","\u002Fuploads\u002Flogo\u002Fliechtenstein-beneficial-owners-register-2026.webp","2026-07-29T00:00:00.000Z",{"slug":72,"title":73,"companyName":74,"logoUrl":75,"breachDate":76,"affectedCount":77,"affectedCountStatus":78},"texas-department-of-criminal-justice-2026","得克萨斯州TDCJ数据泄露（1,494+人受影响）","Texas Department of Criminal Justice","\u002Fuploads\u002Flogo\u002Ftexas-department-of-criminal-justice.png","2026-07-23T00:00:00.000Z",1494,"lower_bound",{"slug":80,"title":81,"companyName":82,"logoUrl":83,"breachDate":84,"affectedCount":20,"affectedCountStatus":21},"pnld-2026","PNLD 2026年数据泄露：警方联系信息","Police National Legal Database","\u002Fuploads\u002Flogo\u002Fpnld-official.png","2026-07-01T00:00:00.000Z",{"slug":86,"title":87,"companyName":88,"logoUrl":89,"breachDate":84,"affectedCount":20,"affectedCountStatus":90},"uk-department-for-education-2026","2026年英国教育部数据泄露事件","UK Department for Education","\u002Fuploads\u002Flogo\u002Fuk-department-for-education-2026.webp","not_disclosed"]