Tchap Breach: France Govt Messaging Hit by Account Hijack

France’s digital affairs directorate confirmed a Tchap security incident detected June 7, 2026 after attackers used a compromised account to access public chat rooms on the government Matrix messenger. DINUM stated private end-to-end encrypted conversations were not impacted.

Civil servant action items

1. Treat anything posted in public Tchap rooms as potentially exposed.
2. Report suspicious follow-up phishing referencing real meeting links.
3. Rotate passwords on any non-SSO Tchap accounts if prompted.

Canonical record: Tchap 2026 on BreachHistory.

Sources: DINUM, BleepingComputer