France’s ‘sovereign’ messenger Tchap was breached, and officials and the hacker disagree on how badly

https://media.thenextweb.com/2026/04/france-linux-windows-migration-digital-sovereignty.avif

France built its own encrypted messenger so civil servants would not have to trust WhatsApp or Telegram. Now that messenger has been breached, and the government and the attacker cannot agree on how much was taken.

France’s National Cybersecurity Agency, ANSSI, detected a compromise of Tchap on 7 June, and the Digital Affairs Directorate (DINUM), which runs the platform, published an incident notice and moved to block the account involved. Crucially, this was not a crack in the encryption or the infrastructure.

Officials say the attacker got in by hijacking a legitimate user account, a compromise of credentials rather than of the system itself.

The government’s account of the damage is narrow. Tchap, which is built on the open Matrix protocol, carries both public and private conversations, and the private ones are end-to-end encrypted. DINUM says that even when an account is impersonated, the history of those private...

Copyright of this story solely belongs to thenextweb.com. To see the full text click HERE

Read more