French investigators have detained a 15-year-old suspect in connection with a major data breach affecting a government agency responsible for identity documents, in a case that highlights growing concerns over youth involvement in high-impact cybercrime.
The arrest follows an investigation into a cyberattack targeting the National Agency for Secure Documents (ANTS), which manages sensitive data tied to passports, national ID cards, and driver’s licenses. Authorities allege the suspect was involved in unauthorized access to the agency’s systems and the extraction of large volumes of personal data.
According to prosecutors, the teenager, whose identity has not been disclosed due to age, was detained on April 25 and questioned under suspicion of operating under the alias “breach3d.” The account had been used to advertise millions of records for sale on cybercrime forums.
Estimates suggest that between 12 million and 18 million records may have been exposed, with some listings claiming up to 19 million entries. The compromised data reportedly includes highly sensitive personal information such as full names, email addresses, phone numbers, postal addresses, and dates of birth.
The breach itself was first detected in mid-April, when ANTS identified unusual activity on its network. Shortly afterward, samples of the stolen data began circulating on underground marketplaces, prompting a formal investigation by France’s cybercrime unit.
Authorities have opened a judicial inquiry into multiple offenses, including fraudulent access to a state-run system and the theft and distribution of personal data. Under French law, such crimes carry potential penalties of up to seven years in prison and fines of up to €300,000.
Despite the scale of the incident, officials stated that the breach did not involve classified government data. However, the exposure of identity-related records significantly increases risks of phishing, identity theft, and social engineering attacks targeting affected individuals.
The case underscores a broader trend in cybercrime investigations, where increasingly younger individuals are implicated in large-scale attacks against critical systems. Law enforcement agencies across Europe have reported a rise in technically skilled young people engaging in financially motivated or notoriety-driven hacking activities.
The investigation remains ongoing, with prosecutors seeking formal charges and judicial supervision for the suspect as authorities continue to assess the full scope of the breach and any potential accomplices.