France's government-built encrypted messaging service, Tchap, has been hit by a security breach.
A threat actor claimed responsibility for the attack on Tchap, which France developed as a secure internal communications channel for government officials. The platform exists as a sovereign alternative to commercial apps — a way for the French state to keep sensitive conversations off infrastructure it doesn't own or control. No details about how the attacker got in or what data was accessed have been disclosed.
Tchap isn't just another enterprise chat tool. It's France's institutional answer to a question governments everywhere face: can you trust foreign-owned, commercial messaging platforms with state communications? The French answer was to build something in-house. A breach of that in-house solution doesn't just create an incident — it challenges the premise that rolling your own is safer than using products that get stress-tested by the security community every day.
Building sovereign infrastructure instead of trusting commercial alternatives is a defensible position — getting breached is a costly way to find out whether the execution matched the principle.