10,000 members affected by a claimed data leak at Tchap

On 2 March 2026, Tchap — the encrypted messaging service operated by France's Direction Interministérielle du Numérique (DINUM) for public-sector agents — was named in a publicly posted data-leak claim. A cybercriminal asserted they had obtained internal data from the platform, which is mandatory across much of the French public sphere for professional exchanges between civil servants.

According to the claim, around 10,000 members were affected and seven conversations were recovered. The poster highlighted rooms tied to the Interior Ministry and security forces, lending the alleged leak particular sensitivity.

Rooms and groups named in the claim included:

• Police Nationale, Gendarmerie Nationale and Police Judiciaire spaces
• Forge MI
• PC STORM Admins
• Tchap Retex
• DTNUM Interieur

The breach remains a claim rather than a confirmed compromise: as reported, it had not been independently verified and DINUM had not publicly substantiated the attacker's assertions. It surfaced amid a broader 2026 series of security incidents and leak claims targeting French state digital infrastructure. The scale, authenticity and exact nature of the exposed data should be treated as unconfirmed.