French Prosecutors Link 15-Year-Old To Mega-Breach At State's Secure Document Agency (theregister.com)
- Reference: 0183079192
- News link: https://it.slashdot.org/story/26/04/30/1949206/french-prosecutors-link-15-year-old-to-mega-breach-at-states-secure-document-agency
- Source link: https://www.theregister.com/2026/04/30/french_gov_mega_breach_suspect/
> It formally [3]opened (PDF) a judicial investigation on April 29, covering alleged fraudulent access to a state-run automated data processing system and the extraction of data from it. Each offense carries a potential prison sentence of seven years and a maximum ~$350,000 fine. Public Prosecutor Laure Beccuau has requested that the minor, whose pronouns, like their name, were also not specified, be formally charged and placed under judicial supervision.
>
> [...] France's approach to punishing minors via its legal system is typically geared toward re-education and rehabilitation rather than prison time. While those aged between 13 and 16 can face time in juvenile detention, it is often used as a last resort measure. The maximum sentences and fines for the charges the 15-year-old in this case faces are upper limits imposed on adult offenders, and would likely be lowered substantially in cases involving a minor, like this one.
[1] https://www.theregister.com/2026/04/30/french_gov_mega_breach_suspect/
[2] https://it.slashdot.org/story/26/04/23/1646252/france-confirms-data-breach-at-government-agency-that-manages-citizens-ids
[3] https://www.tribunal-de-paris.justice.fr/sites/default/files/2026-04/2026-04-30%20-%20CP%20interpellation%20fuite%20de%20donn%C3%A9es%20ANTS.pdf
No real penalty (Score:2)
So criminal gangs can recruit a 15 year old off the Internet, equip them with the tools for the job and promise them a cut. The 15 yo takes the fall, is slapped on the wrist and the adults that convinced the teen are never even caught. What a great system. How much damage did this kid cause again? Oh well, glad this is France and not USA.
Re: (Score:2)
I think the odds of him being used by a legit cyber crime organization vs the french victim organization just plain being criminally negligent are pretty even.
Potentially just wildly incompetent...but if I was defense of some 15 year old, I'd lay it out pretty hard that the security was probably so bad my mother could have tripped and fell into the data.
I'll tell you who should be facing time (Score:2)
The people in charge of IT.
Composing sentences (Score:2)
> Each offense carries a potential prison sentence of seven years and a maximum ~$350,000 fine.
But in french judicial system, when convicted for two offenses, one gets the worst sentence of the two, and not the sum of the two sentences.
So child-level security was implemented... (Score:2)
... but I'm sure those responsible had plenty of "compliance"-certificates at hand to cover their asses.
Precisions (Score:2)
> Each offense carries a potential prison sentence of seven years and a maximum ~$350,000 fine.
Correct, but the translation by The Register leaves open the possibility two sentences would add up, which is not implied by the original in French (and does not happen in French law). Being part of the same crime and judged simultaneously, only one sentence of the same nature will be applied. Reference: L132-2, L132-3 CP [1]https://www.legifrance.gouv.fr... [legifrance.gouv.fr] Regarding the penalty of 7 years for each of the two offences: L323-1 subpar. 2 CP and L323-3 subpar. 2 CP [2]https://www.legifrance.gouv.fr... [legifrance.gouv.fr]
> and would likely be lowered substantially in cases involving a minor, like this one.
Specifically,
[1] https://www.legifrance.gouv.fr/codes/section_lc/LEGITEXT000006070719/LEGISCTA000006165266/#LEGISCTA000006165266
[2] https://www.legifrance.gouv.fr/codes/id/LEGISCTA000006149839/
Rehab (Score:2)
Rehab can and does work, so good on the French.