On August 6, 2026, **Metabase**, a business intelligence and data analysis platform, confirmed that its systems had been compromised. Hackers exploited a vulnerability that was later fixed, gaining access to accounts associated with **ANSSI**, France’s national cybersecurity authority, and **Dinum**, the interministerial digital agency. According to a report released on September 30, 120 accounts were compromised, with 118 linked to ANSSI. Around 30 of these belonged to external users, and through these accounts, hackers exfiltrated data. The data included statistical usage information, email addresses, hashed passwords, administrative details about public organizations, metadata from open-source software contributions, and anonymized connection histories.
ANSSI stated that security measures had been taken, including updating vulnerable systems and resetting passwords for all affected accounts. It also disabled accounts that had not been used in more than three months. Regarding Dinum, ANSSI noted that the compromised data were already public, but emphasized that the vulnerabilities had been resolved. The agency also reset some access rights and removed accounts created by the attackers.
The breach is particularly concerning for ANSSI, which had just released a critical report on September 29 about the security flaws that led to the hacking of the Direction générale des finances publiques, a government finance agency. The vulnerabilities had existed for several months, partly due to inadequate access controls and insufficient internal monitoring of large-scale data retrieval. These weaknesses allowed the breach to occur over an extended period.
In total, nearly 700,000 individuals were affected by the incident. The breach highlights the importance of maintaining robust cybersecurity practices, especially for organizations responsible for safeguarding public data. ANSSI and Dinum have taken steps to address the vulnerabilities, but the incident underscores the ongoing challenges in protecting sensitive information in an increasingly digital world.
French Cybersecurity Agencies Report Data Compromise Involving 700,000 People
AI-rewritten from original reportingHow it works
data-breachmetabaseanssicybersecurityfrancevulnerability
Original sources:
- 🇫🇷BFMTV
- 🇫🇷Clubic
- 🇫🇷Numerama
- 🇫🇷Ouest-France



