Provenance Record

Thorough, well-structured breach report covering timeline, data categories, official response, regulatory notifications, prior incident context, and citizen guidance. The Analysis section adds genuine editorial value by connecting the breach to France's EU Digital Identity Wallet ambitions.

All 6 sources fetched and verified. BleepingComputer: confirms breach detected April 15, 'breach3d' alias, 11.7 million accounts affected, full data categories including login ID/name/email/DOB/account ID/addresses/phone, no biometrics, CNIL/ANSSI/Paris Prosecutor notified. TechCrunch: confirms hacker forum post preceded official disclosure. The Register: confirms official ministerial statement with data categories, no biometrics confirmed. Help Net Security: confirms 'does not allow unauthorized access' statement and phishing warnings. Biometric Update: confirms ANTS declined prior September 2025 breach report, confirms 2027 EUDI Wallet launch timeline. Connexion France: confirms ~12 million accounts, data types, no biometrics, Info-Scams hotline (0 805 805 817), cybermalveillance.gouv.fr guidance.

All key claims are confirmed across sources. The 'ExtaseHunters' alias attribution to BleepingComputer is plausible given BleepingComputer's depth of forum tracking but was not explicitly surfaced in the fetch summary — this is a minor concern. The article's handling of the official 12M vs attacker's 19M discrepancy is appropriately nuanced. Internal link to Cegedim Santé March 2026 breach is a strong editorial connection.

High-quality breach report with strong multi-source coverage from BleepingComputer, TechCrunch, The Register, Help Net Security, Biometric Update, and Connexion France. All claims verified. Ready for publication.