The group claims to have identified a critical vulnerability affecting Digital administration for foreigners in France that could allow attackers to bypass MFA and take over user accounts using expired password workflows. They also claim to have accessed and downloaded some documents as proof.