Probe Finds Louvre Core System Protected by 'LOUVRE' Password After $102m Heist

Post by : Raina Nasser

Paris – France's National Cybersecurity Agency (ANSSI) has disclosed that the Louvre Museum's principal security server was secured with the easily guessed password "LOUVRE," a finding that has intensified scrutiny of the institution's protection systems after the $102 million daytime robbery.

The high-profile break-in on October 19 involved four individuals dressed in construction vests and motorcycle helmets who used a cherry picker to access the Apollo Gallery. In roughly seven minutes the assailants shattered display glass with chainsaws and removed eight rare jewels, including a sapphire diadem, a necklace and a single earring once associated with Queens Marie-Amelie and Hortense.

Cybersecurity Weaknesses Uncovered

Confidential records indicate ANSSI gained access to the museum's video-surveillance servers using the same simplistic password. A 2014 audit flagged serious vulnerabilities, including reliance on protection software that had not been modernised for more than two decades. The review warned that an attacker who obtained control of these systems could facilitate theft or damage to the collection.

It remains uncertain whether the Louvre implemented the audit's recommendations or changed credentials in the intervening years.

Aftermath and Arrests

Authorities have detained four suspects; investigators believe three took part directly in the operation. Prosecutors say the group comprises experienced offenders and that the heist may have been carried out for hire. During the escape the perpetrators used the cherry picker to descend, attempted to set the vehicle on fire and then fled on scooters left nearby.

Louvre director Laurence des Cars acknowledged that camera coverage did not adequately monitor the balcony entry point, noting the nearest camera was oriented away from where the thieves entered. Culture Minister Rachida Dati said internal security systems were functioning at the time but that external protective measures displayed "major flaws."

Planned Security Upgrades

In response to the incident, the Louvre has announced plans to install anti-ramming and anti-intrusion barriers before year-end. The revelation that a basic password protected core systems has also prompted broader calls for urgent cybersecurity modernisation to better safeguard invaluable cultural assets.