A post-heist security audit has revealed shocking details about the Louvre’s cybersecurity, revealing that the password protecting France’s most famous museum’s video surveillance system was simply “LOUVRE.”French newspaper Libération first reported the revelation.The revelations come weeks after the daring October 18 heist, in which thieves made off with crown jewels worth $102 million (£76 million) from the Galerie d’Apollon in broad daylight in a few minutes. The robbers entered via a balcony using a stolen mechanical lift, smashed display cases, and escaped.The findings about the security system are part of a wider trove of documents from the French National Cybersecurity Agency (ANSSI), which has been auditing the museum’s systems for more than a decade. In a 2014 review, ANSSI warned that the Louvre’s IT systems that are responsible for alarms, access control, and video surveillance were dangerously vulnerable. “An attacker who manages to take control of it would be able to facilitate damage or even theft of artworks,” the report said.Cybersecurity advisor Javvad Malik of software firm KnowBe4 described the museum’s defences as “shockingly simplistic.” He told the Daily Mail, “The museum’s video surveillance systems were protected by shockingly simplistic passwords. Whether this weakness played a role in the heist is still under review. But the lesson is clear. When systems safeguarding priceless cultural treasures rely on guessable credentials, it’s not a policy gap – it is an invitation, serving as an indicator that the overall culture of security may be weak.”Adding to the embarrassment, the report found the museum was still using outdated versions of Windows, which experts say is equivalent to “leaving your front door unlocked.” Later reviews, including those as recent as 2025, suggested the Louvre continued to suffer from major cybersecurity flaws.Paris prosecutor Laure Beccuau told Franceinfo radio that the suspects were likely “petty criminals rather than professional members of an organised crime group.” The French daylight heist has since resulted in the endless ridicule of the Louvre across social media, including from billionaire CEO Elon Musk.
