France's government encrypted messaging platform Tchap was breached after a threat actor used a hijacked user account obtained via social engineering. DINUM and ANSSI detected the incident and blocked the compromised account. The attacker claims to have stolen over 13.5GB of files, scraped nearly 650,000 messages, and accessed data on over 73,000 accounts including email addresses and metadata. A vulnerability allegedly allowed media files to be downloaded without authentication tokens. CNIL, France's data protection authority, has been notified due to potential personal data exposure.
Table of contents
Related Articles:120 Impressions