Question 14516 — digital

Summary

Mr. Lionel Tivoli draws the attention of the Minister of the Interior to the exceptionally serious cyberattack having compromised a sensitive database listing legal firearms holders. The disclosure of particularly sensitive personal data, including in particular the names, first names and precise addresses of the individuals concerned, raises very serious concerns about the security of individuals. In fact, the The very nature of this information is likely to facilitate the identification of potential targets for acts of organized crime, such as burglaries with a view to seizing weapons or targeted attacks. Such a leak therefore appears likely to harm not only the private lives of the citizens concerned, but also their physical integrity. In this context, this case directly questions the level of securing State information systems, in particular when they concern so-called “sensitive” data with regard to public security issues. It also calls for increased transparency regarding the failures observed and the corrective measures taken. Consequently, he asks him to specify the exact nature of the flaw which allowed this compromise (external intrusion, configuration fault, inadequacy of security protocols or internal malicious act), as well as the reasons why the data concerned did not benefit from a level of encryption and protection that complies with the most demanding standards in terms of cybersecurity; to detail the measures taken to ensure rapid, complete individual information that complies with the requirements of the General Data Protection Regulation (GDPR), particularly with regard to notification deadlines and recommendations addressed to exposed persons; to indicate whether a global security audit of information systems under its ministry and in particular of government files containing sensitive data will be carried out, in particular under the aegis of the National Agency for Information Systems Security (ANSSI) and according to what timetable; to specify, finally, the structural measures envisaged in order to sustainably strengthen the protection of sensitive data held by the State and to restore the legitimate confidence of citizens in the capacity of public authorities to guarantee their security.

Machine translation from French. The official text remains authoritative.

Timeline

No timeline events have been ingested for this record yet.

Votes

No vote records are attached yet.

Versions

No version snapshots stored. Document URLs remain at the source.

Documents

No documents linked.

Sponsors

No sponsors or actors listed by the source.

Related records

No cross-record relationships stored yet.