The recent burglary at the Louvre Museum in Paris has shed light on a deeper issue that has been plaguing the iconic institution for over a decade—outdated software and inadequate security measures. Reports reveal that the museum has been grappling with upgrading its software systems, including those controlling its video surveillance, for years.
Despite the alarm systems functioning correctly during the burglary last month, it has been uncovered that the Louvre has been running on obsolete software versions as far back as 2014 and 2017. An audit in 2014 by the French National Agency for the Security of Information Systems (ANSSI) found the museum still operating on Windows 2000, even though Microsoft had ceased support for it in 2010.
Subsequent audits in 2017 highlighted the continued use of outdated operating systems like Windows 2000 and Windows XP, which posed significant security risks due to the lack of updates and patches. The reports recommended migrating to supported versions and implementing stronger security measures, suggestions that seem to have been largely ignored by the museum.
Furthermore, the Louvre’s reliance on legacy systems extended to its security applications, with some software providers like Thales discontinuing support for their products as early as 2019. The museum was left with no option but to continue using outdated software, leading to a significant technical debt that compromised its overall security posture.
The repercussions of these long-standing IT issues are concerning, as highlighted by the recent security failures identified by the Inspectorate General of Cultural Affairs. The lack of adequate surveillance systems and a history of underestimating intrusion risks over two decades have left the Louvre vulnerable to security breaches.
While there is no direct link between the outdated software and the burglary, the incident serves as a stark reminder of the critical importance of maintaining up-to-date security protocols. The urgency for the Louvre to address its IT shortcomings and implement robust security measures cannot be overstated, especially in safeguarding invaluable treasures and artifacts housed within its walls.
Moving forward, it is imperative for the Louvre and similar institutions to prioritize regular software updates, strengthen cybersecurity measures, and invest in modern technologies to fortify their defenses against evolving threats. Failure to do so not only jeopardizes the security of priceless cultural assets but also exposes vulnerabilities that malicious actors can exploit with potentially devastating consequences.