Overview
- A 2014 audit by France’s cybersecurity agency ANSSI found the server managing the Louvre’s video surveillance could be accessed with the password “LOUVRE,” and testers demonstrated they could manipulate camera feeds and modify badge access.
- Subsequent reviews documented serious deficiencies, with records indicating core security software dated to 2003 and still running on unsupported Windows Server 2003 well into 2025.
- Police say several people have been arrested in the October robbery; four suspects have been charged and the eight stolen Napoleonic jewels have not been recovered.
- A suspect identified by officials as Abdoulaye N, whose DNA was reportedly found on a display case and items at the scene, had his trial in an unrelated case postponed as his lawyers cited transfer complexities.
- Authorities have not confirmed that the old cyber weaknesses were used in the heist, and Culture Minister Rachida Dati said anti-ramming and anti-intrusion measures will be installed outside the museum within two months.