A post-heist security audit has revealed shocking details about the Louvre’s cybersecurity, revealing that the password protecting France’s most famous museum’s video surveillance system was simply “LOUVRE.”
French newspaper Libération first reported the revelation.
The revelations come weeks after the daring October 18 heist, in which thieves made off with crown jewels worth $102 million (£76 million) from the Galerie d’Apollon in broad daylight in a few minutes. The robbers entered via a balcony using a stolen mechanical lift, smashed display cases, and escaped.
The findings about the security system are part of a wider trove of documents from the French National Cybersecurity Agency (ANSSI), which has been auditing the museum’s systems for more than a decade.
In a 2014 review, ANSSI warned that the Louvre’s IT systems that are responsible for alarms, access control, and video surveillance were dangerously vulnerable. “An attacker who manages to take control of it would be able to facilitate damage or even theft of artworks,” the report said.
Cybersecurity advisor Javvad Malik of software firm KnowBe4 described the museum’s defences as “shockingly simplistic.” He told the Daily Mail, “The museum's video surveillance systems were protected by shockingly simplistic passwords. Whether this weakness played a role in the heist is still under review. But the lesson is clear. When systems safeguarding priceless cultural treasures rely on guessable credentials, it's not a policy gap – it is an invitation, serving as an indicator that the overall culture of security may be weak.”
Adding to the embarrassment, the report found the museum was still using outdated versions of Windows, which experts say is equivalent to “leaving your front door unlocked.” Later reviews, including those as recent as 2025, suggested the Louvre continued to suffer from major cybersecurity flaws.
Paris prosecutor Laure Beccuau told Franceinfo radio that the suspects were likely “petty criminals rather than professional members of an organised crime group.”
The French daylight heist has since resulted in the endless ridicule of the Louvre across social media, including from billionaire CEO Elon Musk.
Social media reactions:
French newspaper Libération first reported the revelation.
The revelations come weeks after the daring October 18 heist, in which thieves made off with crown jewels worth $102 million (£76 million) from the Galerie d’Apollon in broad daylight in a few minutes. The robbers entered via a balcony using a stolen mechanical lift, smashed display cases, and escaped.
The findings about the security system are part of a wider trove of documents from the French National Cybersecurity Agency (ANSSI), which has been auditing the museum’s systems for more than a decade.
In a 2014 review, ANSSI warned that the Louvre’s IT systems that are responsible for alarms, access control, and video surveillance were dangerously vulnerable. “An attacker who manages to take control of it would be able to facilitate damage or even theft of artworks,” the report said.
Cybersecurity advisor Javvad Malik of software firm KnowBe4 described the museum’s defences as “shockingly simplistic.” He told the Daily Mail, “The museum's video surveillance systems were protected by shockingly simplistic passwords. Whether this weakness played a role in the heist is still under review. But the lesson is clear. When systems safeguarding priceless cultural treasures rely on guessable credentials, it's not a policy gap – it is an invitation, serving as an indicator that the overall culture of security may be weak.”
Adding to the embarrassment, the report found the museum was still using outdated versions of Windows, which experts say is equivalent to “leaving your front door unlocked.” Later reviews, including those as recent as 2025, suggested the Louvre continued to suffer from major cybersecurity flaws.
Paris prosecutor Laure Beccuau told Franceinfo radio that the suspects were likely “petty criminals rather than professional members of an organised crime group.”
The French daylight heist has since resulted in the endless ridicule of the Louvre across social media, including from billionaire CEO Elon Musk.
Social media reactions:
— Elon Musk (@elonmusk) November 5, 2025
if you ever have imposter syndrome, just remember that the security password for The Louvre was "louvre" pic.twitter.com/xHIhw7DwaK
— INFOSEC F0X 🔥 (@infosec_fox) November 5, 2025
Louvre team setting the video surveillance password to "Louvre" pic.twitter.com/GNN1zAWmFs
— Cybernews (@CyberNews) November 5, 2025
The Louvre's surveillance servers were hacked because the password was "Louvre" and ran on Windows 2000 and XP.
— Lain on the Blockchain (@CryptoCyberia) November 4, 2025
Lol pic.twitter.com/u3XtUNnmXu
Meanwhile at Louvre Museum:
— SpicySecretHistory (@MakingFranklins) November 5, 2025
Password? Louvre
😬🛑 pic.twitter.com/lhTTZlIlK7
So the video surveillance system password for the Louvre was ... "Louvre".
— Pierre de Wulf (@PierreDeWulf) November 4, 2025
But sure AI is the thing we shouldn’t use because it’s not 100% accurate. pic.twitter.com/NRJUVl52rq
You may also like

Kuwait police expose KD 153,000 online gambling and money-laundering scam

'Troll sena': PM Modi takes dig at critics who mocked Team India after early World Cup losses - watch

Left alliance leading in JNU Student Union elections; ABVP ahead on one seat

Advanced AI Lab: IBM launches Advanced AI Lab at AICTE, learn how students will benefit..

Oman observes rare Comet SWAN, a celestial visitor from the outer solar system




