France arrests 22-year-old over Interior Ministry hack

French authorities arrested a 22-year-old on Wednesday as part of an investigation into a hack of the country’s Interior Ministry that saw the perpetrators access several email accounts and dozens of confidential documents.

The ministry confirmed what was described as a serious incident after a user claimed credit for a hack on the cybercrime website BreachForums. A government spokesperson said the “reality and scope” of that post “are currently being subjected to in-depth verification as part of the investigation.”

Interior Minister Laurent Nuñez told journalists the hack last week compromised files relating to judicial records and wanted persons. He said the hackers had been in the network for several days.

Nuñez could not “absolutely say whether this will compromise investigations or not,” but stressed that the ministry had not received a ransom demand and that the attack “does not endanger the lives of our fellow citizens.”

Officials said the incident is being handled “with the highest vigilance and at the highest level” because of the sensitivity of the systems involved.

In an announcement on social media, the Paris Prosecutor’s Office said a person had been arrested on charges “including an attack on an automated personal data processing system operated by the State, as part of an organized group.”

The offence carries a potential sentence of 10 years in prison.

Prosecutors say the suspect, born in 2003, was already known to them after having been convicted of similar crimes earlier this year. They said an update would be provided at the suspect’s time in police custody, which could last up to 48 hours.

Get more insights with the

Recorded Future

Intelligence Cloud.

Learn more.

No previous article

No new articles

Alexander Martin

Alexander Martin

is the UK Editor for Recorded Future News. He was previously a technology reporter for Sky News and is also a fellow at the European Cyber Conflict Research Initiative.

 

Total
0
Shares
Previous Post

ThreatsDay Bulletin: WhatsApp Hijacks, MCP Leaks, AI Recon, React2Shell Exploit and 15 More Stories

Next Post

Hackers breach internal servers of tech provider for Britain’s health service

Related Posts

CISA Adds Actively Exploited XSS Bug CVE-2021-26829 in OpenPLC ScadaBR to KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) catalog to include a security flaw impacting OpenPLC ScadaBR, citing evidence of active exploitation. The vulnerability in question is CVE-2021-26829 (CVSS score: 5.4), a cross-site scripting (XSS) flaw that affects Windows and Linux versions of the software via
Read More

RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web Servers

Cybersecurity researchers have disclosed details of a persistent nine-month-long campaign that has targeted Internet of Things (IoT) devices and web applications to enroll them into a botnet known as RondoDox. As of December 2025, the activity has been observed leveraging the recently disclosed React2Shell (CVE-2025-55182, CVSS score: 10.0) flaw as an initial access vector, CloudSEK said in an
Read More

⚡ Weekly Recap: AI Automation Exploits, Telecom Espionage, Prompt Poaching & More

This week made one thing clear: small oversights can spiral fast. Tools meant to save time and reduce friction turned into easy entry points once basic safeguards were ignored. Attackers didn’t need novel tricks. They used what was already exposed and moved in without resistance. Scale amplified the damage. A single weak configuration rippled out to millions. A repeatable flaw worked again and
Read More