French officials face heavy criticism after it was revealed that the Louvre Museum’s internal video surveillance system used the weak password "LOUVRE" for years, exposing significant security flaws.
Reports confirm that despite numerous warnings from France’s national cybersecurity agency, ANSSI, the simplistic password remained unchanged since a 2014 audit identified vulnerabilities. This negligence came to light following a multimillion-euro jewel theft from a temporary Louvre exhibition in late October.
Investigations have uncovered major lapses that left the world’s most visited museum vulnerable to cyber intrusion. The attackers exploited outdated network protocols, gaining control of internal cameras and disabling them to avoid detection.
“The system’s weaknesses were first identified in a 2014 audit but were never fully addressed.”
The breach was discovered during an internal inquiry following the theft of rare jewels, highlighting how outdated security protocols were exploited to infiltrate the museum’s surveillance network.
Authorities now face mounting pressure to overhaul cybersecurity standards to protect cultural landmarks from further attacks.
Author’s summary: Years of ignored cybersecurity warnings left the Louvre’s surveillance system exposed, with a simplistic password enabling hackers to disable cameras and facilitate a costly jewel theft.