Tchap, the French government's secure messaging service, victim of a cyberattack

The Tchap instant messaging service, used by French government employees, was hit by a cyberattack. The Interministerial Directorate for Digital Affairs confirmed the security incident on Monday, which was detected on June 7, 2026. The attack resulted from account hijacking, allowing a malicious actor to request access to normally restricted content. The compromised account was quickly identified and blocked by technical teams.

Hundreds of thousands of messages exposed

According to initial estimates, more than 643.000 messages from 73.000 public employees across 976 chat rooms were exposed during the breach. Authorities specify, however, that private, encrypted conversations remained protected. Only public exchanges and certain documents shared on the platform may have been accessed by the attacker. The exact number of compromised accounts has not yet been released.

The incident is now under control, assures the Interministerial Directorate for Digital Affairs. Tchap, launched to offer a secure alternative to commercial messaging services, is used daily by French civil servants. This attack raises questions about the robustness of the security systems implemented to protect sensitive administrative communications.