Leak at Agence Nationale des Fréquences

On 24 April 2026, Agence Nationale des Fréquences (ANFR) — France's national agency responsible for managing the radio-frequency spectrum — disclosed a data breach affecting its Radiomaritime online service, used by ship operators to manage maritime radio licences. Attackers gained unauthorized access to user accounts on the platform between 4 and 10 April 2026; ANFR detected the intrusion on 13 April and immediately suspended the service.

Roughly 330,000 users of the Radiomaritime teleservice had personal data exfiltrated. France's cybersecurity agency ANSSI later observed the stolen data being put up for sale online, with a sample published as proof.

Exposed data categories included:

• Name and first name
• Postal address
• Phone number
• Email address
• Date of birth

ANFR stated that no licence-related data or attached documents were disclosed. In response, the agency closed access to the affected service, deployed additional security measures (reinforced firewalls and connection logging), notified the data-protection regulator CNIL, and filed a complaint with the public prosecutor. Affected users were emailed and warned to stay vigilant against phishing attempts that could exploit the leaked details.