French government agency confirms breach as hacker offers to sell data

Post by traceroute66 » Thu, Apr 23, 2026, 6:58 PM UTC

nout wrote: post #78

hk__2 wrote: post #10

> the data stolen in the breach could include full names, dates and places of birth, mailing and email addresses, and phone numbers on an undisclosed number of citizens Nothing really new here sadly, this information about me have leaked half a dozen of times in the past 2-3 years or so. These things will never change if the only penalty the company/agency gets is "send a message to your users saying you are sorry an…

Or maybe the government should not require companies to KYC you for every little stupid thing or action you do in this world. What happened to requiring only the information that's actually required? Why do I need to be KYCd in the systems when buying banana, ordering delivery, etc. Because of the inevitable breaches and leaks - KYC is the illicit activity. The selling point of KYC was preventing fraud and money laun…

    - That only discloses minimum information required
    - For a specific recipient organisation
    - For a specific duration
    - For a specific use-case by that organisation

Post by misiek08 » Thu, Apr 23, 2026, 7:10 PM UTC

Post by progval » Thu, Apr 23, 2026, 7:55 PM UTC

traceroute66 wrote: post #112

nout wrote: post #78

Earlier quoted context omitted.

Or maybe the government should not require companies to KYC you for every little stupid thing or action you do in this world. What happened to requiring only the information that's actually required? Why do I need to be KYCd in the systems when buying banana, ordering delivery, etc. Because of the inevitable breaches and leaks - KYC is the illicit activity. The selling point of KYC was preventing fraud and money laun…

> Or maybe the government should not require companies to KYC you for every little stupid thing Actually.... Say what you like about the French today, but one good thing they have is an electronic service[1] where you can generate single-use KYC ID: - That only discloses minimum information required - For a specific recipient organisation - For a specific duration - For a specific use-case by that organisation More c…

Post by samplifier » Thu, Apr 23, 2026, 8:07 PM UTC

progval wrote: post #116

traceroute66 wrote: post #112

Earlier quoted context omitted.

> Or maybe the government should not require companies to KYC you for every little stupid thing Actually.... Say what you like about the French today, but one good thing they have is an electronic service[1] where you can generate single-use KYC ID: - That only discloses minimum information required - For a specific recipient organisation - For a specific duration - For a specific use-case by that organisation More c…

It looked great and I wanted to try it, but it doesn't work on the web and my smartphone is rejected with no clear explanation ("missing some security mechanisms"); probably because I'm running LineageOS with MicroG.

Post by progval » Thu, Apr 23, 2026, 8:27 PM UTC

wiether wrote: post #119

traceroute66 wrote: post #112

Earlier quoted context omitted.

> Or maybe the government should not require companies to KYC you for every little stupid thing Actually.... Say what you like about the French today, but one good thing they have is an electronic service[1] where you can generate single-use KYC ID: - That only discloses minimum information required - For a specific recipient organisation - For a specific duration - For a specific use-case by that organisation More c…

Why do I have to learn about it on HN? I'm tired of having to connect on EDF' shitty website to get a new PDF every three months. I just set it up! A bit bumpy because login on Ameli/Impôts wasn't working on Orion so I had to go on Safari, but otherwise its done. I even have colored pictures on the virtual CNI/Permis! Thanks! EDIT: Why do the put three stats about trains on your linked page?!