France XRF Theft Pattern: Eight Devices, One Year

Summary

Between May and November 2025, at least eight X-ray fluorescence (XRF) analyzers were stolen across France. All were lead paint detectors used by property diagnostics companies. All contained low-activity radioactive sources. All were stolen from vehicles or in transit.

The pattern raises a question practitioners should be asking: Is this opportunistic theft, or is someone targeting these devices?

The 2025 Incidents

ASNR (France's nuclear safety authority) published notifications for the following XRF device thefts in 2025:

All incidents were classified INES Level 1. No devices have been publicly reported as recovered.

What These Devices Are

XRF lead paint analyzers are standard equipment for French property diagnostics companies (diagnostiqueurs immobiliers). Under French law, any property built before 1949 must be tested for lead paint before sale or rental. This creates a large, decentralized fleet of radioactive devices in constant transit.

Typical device profile:

• Function: Non-destructive lead detection in paint via X-ray fluorescence
• Sources: Cobalt-57 (Co-57) or Cadmium-109 (Cd-109)
• Activity: 50–850 MBq nominal (Category D under French health code)
• Form factor: Handheld device in small carrying case (~20cm × 20cm)
• Brands: Fondis (FENX, FENX2, PB200i), Niton, Heuresis
• Value: €15,000–30,000 new

Radiological risk: Low. Category D sources present minimal hazard under normal conditions. The devices are designed for handheld use and emit collimated beams only when triggered. Theft does not create acute public health risk unless someone deliberately disassembles the device and removes the source.

The Pattern

Five characteristics define the 2025 theft pattern:

1. Vehicle-Based Targeting

Every theft occurred while the device was in or near a vehicle. Common scenarios:

• Device stolen from parked car (vehicle break-in)
• Case stolen from ground near vehicle while operator was working
• Case grabbed while operator was briefly distracted

This matches the pattern seen with moisture density gauge thefts in the US: thieves target the case, not the contents. They're looking for tools or valuables, and the XRF device happens to be there.

2. Geographic Spread

Incidents occurred across France: Paris region (Kremlin-Bicêtre, Nanterre, Évry), Provence (Aix-en-Provence), and northern France (Hersin-Coupigny). This isn't a single criminal operation hitting one area—it's a nationwide vulnerability.

3. Single Company Hit Twice

AED Expertises (Évry) lost devices in two separate incidents: one in May, two more in October. This suggests either inadequate security response after the first incident, or that the company's operational patterns make it a repeat target.

4. Same Device Types

All stolen devices were lead paint analyzers from a narrow range of manufacturers (primarily Fondis). This reflects market concentration—Fondis dominates the French diagnostics market—not necessarily targeting.

5. No Recoveries Reported

Unlike US gauge thefts (where some devices are recovered when thieves realize what they have), none of the French XRF devices have been publicly reported as recovered. This could mean:

• Devices were sold on secondary markets without recognition
• Devices were discarded
• Devices are in circulation but unreported
• Recoveries occurred but weren't publicized

Organized Targeting or Opportunistic Theft?

The evidence is ambiguous.

Arguments for opportunistic theft:

• Theft methods (vehicle break-ins, grabbing unattended cases) match general property crime patterns
• Device form factor (small professional-looking case) attracts opportunistic thieves
• No indication thieves knew or cared about radioactive content
• Geographic spread suggests independent incidents, not coordinated campaign

Arguments for targeted theft:

• Eight incidents in seven months is higher than historical baseline
• Same company hit twice suggests possible surveillance
• No recoveries suggests devices are being retained, not discarded
• XRF devices have resale value in legitimate secondary markets

Most likely scenario: Opportunistic theft enabled by systemic security failures. The diagnostics industry operates thousands of devices in constant transit, with minimal physical security protocols. Thieves targeting tool cases from vehicles inevitably capture some XRF devices. The 2025 spike may reflect increased general property crime rather than specific targeting.

Why This Matters for Detection Practitioners

The Regulatory Gap

French regulations require XRF operators to report thefts to ASNR, but there's no mandatory security protocol for devices in transit. Compare this to US NRC requirements for moisture density gauges, which specify:

• Devices must be under direct control or secured
• Transport must be in locked containers
• Overnight storage must be in secured facilities

France has no equivalent prescriptive requirements for Category D sources. The diagnostics industry self-regulates security practices.

The Secondary Market Risk

Stolen XRF devices can enter legitimate secondary markets. Used lead paint analyzers trade actively—there's demand from smaller diagnostics firms seeking to avoid new equipment costs. A stolen device with its source still active has commercial value.

This creates a tracking problem: a device stolen in France could resurface anywhere in Europe, potentially with falsified provenance documentation.

The Scrap Metal Endpoint

Eventually, unrecovered devices will enter the waste stream. Co-57 has a 271-day half-life; Cd-109 has a 462-day half-life. Devices stolen in 2025 will remain radiologically significant into 2027–2028.

If these devices end up in scrap metal—like the Indonesia Cs-137 incident—they could trigger portal monitor alarms or, worse, be melted down without detection.

Implications for Security

For XRF Operators

The 2025 pattern suggests French diagnostics companies need to improve in-transit security:

• Never leave devices unattended near vehicles, even briefly
• Use vehicle lockboxes for device storage during site visits
• Vary routines to avoid predictable patterns
• Report thefts immediately—delayed reporting (common in the 2025 incidents) reduces recovery chances

For Scrap and Recycling Operators

Be aware that XRF devices may enter your stream. Key identifiers:

• Small professional cases (often branded Fondis, Niton, Heuresis)
• Handheld "gun" form factor devices
• Radiation warning trefoil labels (though thieves may remove these)

Portal monitors calibrated for Cs-137 will detect Co-57 and Cd-109, but the energy signatures differ. Ensure your detection systems are configured for the full range of industrial source isotopes.

For Regulators

The 2025 pattern suggests a gap in French source security requirements. Consider:

• Mandatory in-transit security protocols for mobile sources
• Registration and tracking requirements for secondary market transactions
• Cross-border notification when devices are reported stolen

What to Watch

Recoveries (or Lack Thereof)

If none of the eight devices surface in the next 12 months, it suggests either organized retention or systematic disposal. Either outcome has implications for future risk.

2026 Incident Rate

If the 2025 rate continues—roughly one theft per month—France has a systemic problem requiring regulatory intervention. If it drops, 2025 may have been an anomaly.

Cross-Border Detections

XRF devices stolen in France could trigger alarms anywhere in Europe. Border and port operators should be aware of the 2025 theft pattern.

Sources

• ASNR: Vol d'un appareil XRF, Kremlin-Bicêtre (May 2025)
• ASNR: Vol d'un appareil XRF, Aix-en-Provence (Sep 2025)
• ASNR: Perte de deux appareils XRF, Évry-Courcouronnes (Oct 2025)
• ASNR: Vol d'un appareil XRF, Nanterre (Oct 2025)
• ASNR: Vol d'un appareil XRF, Hersin-Coupigny (Oct 2025)

Related

• Incident Log: 2025-11 | France | Theft (Multiple)
• Briefing: Indonesia Cs-137 Scrap Contamination
• Reference: XRF Analyzer Source Security (pending)

This Briefing is part of Radiation Monitor's operational intelligence coverage. For the full 2025 Incident Index, see Incidents.