Louvre Heist Exposes Cybersecurity Lapse After 'LOUVRE' Password Found

Paris – Investigators have revealed that the Louvre Museum’s central protection system was secured with the easily guessed password “LOUVRE” following the $102 million daytime robbery. France’s National Cybersecurity Agency (ANSSI) uncovered the credential, intensifying questions about the museum’s digital security practices.

The high-profile break-in took place on October 19 when four individuals, disguised in construction vests and motorcycle helmets, used a cherry picker to access the Apollo Gallery. In roughly seven minutes, the group smashed display cases with chainsaws and escaped with eight rare jewels, including a sapphire diadem, a necklace and a single earring once linked to Queens Marie-Amelie and Hortense.

Cybersecurity Failures Identified

Leaked documents indicate ANSSI was able to reach the museum’s video surveillance servers using the same simple password. A 2014 audit had already highlighted significant cybersecurity gaps at the Louvre, noting reliance on protection software more than two decades old and warning that an intruder gaining control of such systems could enable theft or damage to the collection.

It remains unclear whether the Louvre implemented recommended updates or changed credentials in the years after that assessment.

Arrests and Aftermath

French police have detained four suspects, three of whom are believed to have taken part directly in the theft. Authorities say the suspects are seasoned offenders who may have acted for hire. During their escape the culprits used the cherry picker to descend, tried to set the machine alight, and fled on nearby scooters.

Louvre director Laurence des Cars acknowledged that surveillance coverage failed to monitor the balcony entry point used by the thieves, noting the nearest camera was pointed away. Culture Minister Rachida Dati said internal security systems were functioning during the incident but external protections showed “major flaws.”

Planned Security Measures

Following the robbery, the Louvre announced plans to install anti-ramming and anti-intrusion barriers before year-end. The revelation that a simple password protected critical systems has prompted wider debate about the urgent need to modernise cybersecurity to protect priceless cultural assets.