On June 7, 2026, the French government’s sovereign messaging platform Tchap was compromised through account hijacking, impacting roughly 9% of its 825,000 registered users (about 73,467 accounts). The threat actor 'misere' claimed to have stolen 13.5GB of data, including over 640,000 plaintext messages and user details, though these claims are unverified and based on secondary reports. Tchap is designed as a secure, end-to-end encrypted messaging service for government employees, but the breach exposed personal and organizational information. The attack does not appear to be an advanced persistent threat (APT) but could facilitate targeted spear-phishing campaigns. The exact cause, actor identity, and motivation remain speculative.

Approximately 73,000 French government accounts were compromised, exposing personal data such as names, email addresses, affiliated government entities, and avatars. The alleged theft of over 640,000 plaintext messages and 13.5GB of data could enable targeted spear-phishing and social engineering attacks against government employees and departments. The breach undermines the confidentiality of communications on a platform intended for secure government messaging. However, there is no confirmed evidence of further exploitation or broader systemic compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The French government’s digital directorate (DINUM) has disclosed the breach and is presumably managing incident response. Organizations using Tchap should follow official guidance from DINUM. Given the nature of the breach (account hijacking), affected users should reset credentials and monitor for suspicious activity. No public vendor advisory or patch information is available at this time.