The mystery surrounding one of the most remarkable thefts of the century has taken a new turn.

A French court has criticized the Louvre Museum’s leadership in Paris for prioritizing high-profile acquisitions and renovation projects over safeguarding the famous institution’s security.

Last month’s bold daylight theft, where four individuals made off with invaluable historic jewels, served as a “deafening alarm signal,” remarked Pierre Moscovici, head of the Court of Accounts, during a press briefing on Thursday. His comments followed the release of a report by the court.

The report, initiated before the heist on October 19, suggests that the museum’s management has been focused on “visible and attractive” endeavors, such as acquiring art and redesigning the museum’s layout, at the expense of ensuring adequate security measures.

Following the robbery, long-standing security loopholes have come to light, including a 2014 alert that one of the museum’s critical passwords was merely “LOUVRE.”

The new report only adds to a number of security failings exposed by the heist.

Within four minutes of arriving at the outside wall of the Louvre, the thieves had scaled the building and were breaking through a window.

Only then were internal alarms triggered.

Four minutes later, after breaking into a reinforced case and grabbing nine pieces of historic jewellery, the thieves were making their escape.

“The weaknesses of the protection of our perimeter are known and identified,” Louvre director Laurence des Cars told French politicians after the heist.

Internally too, the situation seems stark.

For the Louvre’s 465 museum galleries, security staff had only 432 CCTV cameras to monitor the interior last year, according to the report.

While that’s a nearly 50 per cent increase on the number available in 2019, it still left 61 per cent of the galleries without any CCTV coverage.

The world’s largest museum, the Louvre covers some 60,000 square metres.

In comparison, the Detroit Institute of Arts in the northern US boasts a similar footprint (including a theatre and recital hall) but has more than 550 CCTV cameras, according to camera manufacturer Axis.

Des Cars told French senators that she envisions a doubling of the number of cameras within the 37-hectare Louvre property in the years to come.

In its recommendations, the Court of Accounts’ report stressed the need for the Louvre to “strengthen its internal control function, which remains underdeveloped for an institution the size of the Louvre.”

The holes in the Louvre’s security weren’t all physical. In the virtual realm its track record left much to be desired.

A 2014 report from the French information security agency (ANSSI) seen by French newspaper Liberation claimed that the password for the server managing the museums’ sprawling CCTV network was simply “LOUVRE.”

Access to software managed by the security technology company Thales was protected by a similarly foolproof password: “THALES” – according to Liberation.

In the security audit, ANSSI reportedly recommended the Louvre boost its cyber security as well as move away from outdated software that could jeopardise its protective stance.

ANSSI did not deny the report to CNN but added that the audit, “cannot be considered representative of the current level of security” of the Louvre’s IT systems.

The report focused on the museum’s budgetary priorities in recent years, which saw some 27 million euros ($48 million) spent on maintenance works between 2018 and 2024, with a further 60 million euros on restoration of the Louvre palace.

In contrast, that period saw the Louvre splash double that figure on altering the museum layout and buying up artworks.

The museum spent 105 million euros on artworks in the six years to 2024, sweeping up 2754 pieces in that time.

In 2021, the Louvre spent some 5 million euros on two works by French Rococo painter Jean-Honoré Fragonard. This April, the Louvre made a 2.2-million euro purchase of an “exceptional” Fabergé triptych.

Many of the Louvre’s purchases are clouded in a certain secrecy, particularly regarding the purchase price. The Court of Accounts’ report said the Louvre should pay greater attention to the price of acquired works and specifically warned the museum against buying art works at a higher price if they were sold at auction for less than two years prior.

In contrast to the focus on glitzy, eye-catching purchases, the damning report notes astonishing delays to work on the Louvre’s security infrastructure.

Recommended security upgrades from a 2015 audit still won’t be completed until 2032, it revealed.

The report examined nearly eight years of museum operations across periods overseen by two executives.

At the time of publication, no executives (or other staff) have been fired or resigned over the theft.

The offer of des Cars to resign as museum director was not accepted by French Culture Minister Rachida Dati.