Incident Overview

A group of threat actors (EvilDump, ExtaseHunters, and Breach3d) claims to have compromised ANTS (Agence Nationale des Titres Securises), the French government agency responsible for issuing and managing secure identification documents and legal titles. ANTS, now operating under the France Titres brand, handles the production and delivery of passports, national identity cards, driver's licenses, vehicle registration certificates, and other official government documents for French citizens. The actors are listing a database of 18 million records for sale.

The sample JSON data confirms the database structure with highly detailed per-record fields:

• Full Legal Names: First names, up to 5 middle/additional names (prenom1 through prenom5), last names, and usage/maiden names (nomusage). The sample shows records with multiple given names reflecting French naming conventions.
• Contact Details: Personal email addresses from providers including Orange, Gmail, Hotmail, and custom domains, alongside verified mobile phone numbers.
• Detailed Birth Data: Exact dates of birth, birth city (naisscommune), birth department (naissdepartement), and birth country (naisspays).
• Physical Addresses: Street number, street name, postal code, city, commune, and country fields. Many records in the sample show empty address fields, suggesting partial population.
• Account Metadata: Unique usernames (identifiant, which are internal system IDs), government certification status (certifie: true/false indicating whether the identity has been government-verified), and professional status flags (pro: true/false).
• Gender and Civil Status: Civil titles (M./Mme) and professional status indicators.

The government-verified certification status field is what makes this breach exceptionally dangerous. The "certifie: true" flag means the French government itself has confirmed that identity is authentic. For an attacker, a government-certified identity record is the gold standard for identity fraud because it carries implicit trust across all French administrative, financial, and legal systems. The 18 million record count represents a significant portion of the French adult population (France has approximately 50 million adults), making this one of the largest alleged government identity breaches in European history if confirmed.

The post was made by EvilDump and credits ExtaseHunters and Breach3d as collaborators. The sample data shows sequential internal IDs (79000072 through 79000080) suggesting structured database extraction rather than scraping.