Cyberattack Disrupts Online Reservations for Thousands of European Cultural Sites In early March, a ransomware attack targeting Irec SAS, the French subsidiary of online ticketing platform Vivaticket, disrupted online reservations for nearly 3,500 museums, monuments, and cultural sites across Europe. The RansomHouse ransomware operation claimed responsibility, listing Irec on its leak site and asserting that stolen data included full names, purchase histories, reservation details, email addresses, login timestamps, account metadata, and countries of residence. Among the affected sites were high-profile landmarks such as the Musée du Louvre, Musée d’Orsay, Arc de Triomphe, Eiffel Tower, and Notre-Dame de Paris. While Vivaticket confirmed no credit card or banking details were accessed, some ticketing services and organizational platforms remain unavailable. The French National Cyber Security Directorate (ANSSI) and law enforcement are investigating the breach alongside Vivaticket to assess its full scope. The French Ministry of Culture stated that impacted institutions are still evaluating the financial and operational toll of the attack. Customers have been notified of the breach as authorities work to contain the fallout.

The Louvre Museum in Paris faced a digital security lapse exposed by a physical burglary, where thieves stole eight jewelry pieces after breaking in through a second-floor window. While alarm systems functioned and police responded promptly, an audit revealed longstanding cybersecurity vulnerabilities, including outdated Windows software and unpatched video surveillance systems. The museum had failed to address these issues for years, leaving critical infrastructure exposed. A full security overhaul—including governance policy updates, camera upgrades, and cybersecurity protocol revisions—is now mandated by year-end. The incident highlights systemic neglect in maintaining basic IT hygiene, raising concerns about potential future breaches or data leaks due to unsecured legacy systems. Though no digital data was confirmed stolen in this event, the underlying cybersecurity failures pose a significant risk for exploitation by malicious actors, particularly given the museum’s high-profile status and sensitive operational data (e.g., visitor records, financial transactions).

The Louvre Museum in Paris suffered a $100 million jewel heist due to severe cybersecurity and physical security lapses. Investigations revealed that the museum’s surveillance system used weak passwords like 'Louvre' and 'Thales', with one visibly displayed on the login screen. A decade-old audit exposed additional vulnerabilities, including outdated Windows Server 2003 software and unguarded rooftop access, which thieves exploited using an electric ladder to breach a balcony. The incident highlighted systemic negligence in digital defenses, leaving the world’s most visited museum exposed to both cyber and physical intrusions. While no direct data breach of customer or employee records was reported, the reputational damage and financial loss were substantial, underscoring how poor password hygiene and unpatched systems can enable high-stakes crimes. The Louvre’s failure to address long-standing security flaws—despite prior warnings—raises concerns about institutional accountability in safeguarding high-value assets against evolving threats.

A series of security audits spanning from 2014 to recent years exposed severe cybersecurity vulnerabilities at the Louvre Museum, France’s iconic cultural institution. Investigative reports by CheckNews (Libération) revealed egregious failures, including the use of trivial passwords like "LOUVRE" for video surveillance servers and "THALES" for a critical software platform provided by Thales. Penetration testers easily exploited these weak credentials to infiltrate systems, gaining unauthorized access to badge access controls—enabling them to modify employee permissions remotely. Audits also uncovered obsolete, unsupported systems (e.g., Windows 2000, XP, and Server 2003) still operational on the network, leaving them exposed to unpatched exploits. While the recent physical jewel heist (unrelated to cyberattacks) dominated headlines, the audits confirmed that a cyber intruder could have compromised surveillance feeds, access systems, or internal data with minimal effort. Museum management refused to comment on remediation efforts, raising concerns that these critical flaws may persist, endangering both physical security and digital assets tied to France’s cultural heritage.