“Louvre” as a password, outdated software, impossible updates… Ten years of IT security breaches at the world’s leading museum

The piece summarises a decade of IT security breaches at the Louvre, describing the museum as the world’s leading institution troubled by outdated software and failed updates, with a long history of vulnerabilities that had been warned about but not fully patched.

It notes that in mid-December 2014 three cybersecurity experts arrived at the museum, and that the French National Cybersecurity Agency (ANSSI) conducted an audit of the IT systems to test the security network, which houses the museum’s most critical protection and detection equipment such as access control, alarms and video surveillance. The article cites statements that an attacker who gains control of this network could facilitate damage or theft of artworks.

It also mentions a sequence of events surrounding the Louvre burglary on 19 October, with the culture minister later acknowledging security flaws existed and proposing emergency measures to audit and address gaps. According to CheckNews, confidential documents and tender-related materials reveal a long history of major cybersecurity vulnerabilities at the Louvre that had been warned about but not all patched.