French government's Tchap encrypted messaging platform compromised in security breach

Summary

France's internal government encrypted messaging platform Tchap, built on Matrix, was compromised in a security breach detected by ANSSI on June 7. An attacker account was identified and blocked, but extracted data—including nearly 14GB of documents, email addresses, meeting links, and organizational data—remains under investigation. A threat actor claimed responsibility and alleged hardcoded LDAP credentials were found. Users were warned that public chatroom content is not encrypted, though private conversations use end-to-end encryption. The breach comes amid France's broader push toward homegrown government software alternatives.