France

Country

Schneider Hit In MOVEit Transfer Zero Day

May 30, 2023

Schneider Electric suffered cyberattack from the Clop ransomware group

“On May 30th, 2023, Schneider Electric became aware of vulnerabilities impacting Progress MOVEit Transfer software.” the company said in a statement. “Subsequently, on June 26th, 2023, Schneider Electric was made aware of a claim mentioning that we have been the victim of a cyberattack relative to MOVEit vulnerabilities,” the company said. “Our cybersecurity team is currently investigating this claim as well.”

No further information was released at this time.

read more

European defense contractor, Hensoldt, allegedly Victim of Snatch Ransomware Attack.

August 18, 2022

A French subsidiary of HENSOLDT AG, and part of its subsidiaries (“Nexeya”), have become the target of a serious cyber attack on its IT infrastructure in recent days. According to current information, both of Nexeya’s data centers in France have been affected, and it is likely that a significant amount of data has been accessed and systems have been encrypted. Nexeya’s ongoing operations have been impacted by this cyber attack.

A comprehensive investigation of the incident has been launched immediately, in close cooperation with the relevant authorities.

Work is proceeding at full speed to restore Nexeya’s ongoing operations as quickly as possible. According to current knowledge, the IT infrastructure and data of other companies of the HENSOLDT Group are not affected.

read more

Critical Infrastructure Disrupted in Martinique by Prolonged Cyberattack

May 16, 2023

The Caribbean island of Martinique is dealing with a cyberattack that has disrupted internet access and other infrastructure for weeks. The attack began on May 16, forcing officials to isolate the affected systems. Cybersecurity experts were mobilized to help gradually restore their operations.

“Regarding education services, technical solutions are being set up to restore internet access to colleges and high schools. School administrators and the government are coordinating in order to ensure the smooth handling of exams. The government will make every effort to ensure the payment of social benefits,” officials said in a statement.

“Regarding financial services, the community will be able to issue new purchase orders and ensure the payment of bills. These must be filed in paper format from the mail office in Plateau Roy. Concerning aid and subsidy services, the filing of requests must be made in paper format to the office in Plateau Roy due to the unavailability of online platforms.”

read more

Disruption of online vote in Martinique

January 4, 2023

The platform for the online vote on a flag and anthem for the French overseas department of Martinique had to be taken offline, on January 4, 24 hours after the start of the vote. The reason for the disruption was reported to be a cyberattack.

The attack on government servers upended a nearly two-week online voting window that began on Jan. 2. Officials said the attack was not successful but forced them to temporarily shut down the system.

read more

Lacroix Hit in Cyberattack

May 12, 2023

Global electronics maker, Lacroix, suffered a cyberattack that left three operating sites shut down, company officials said.
Lacroix said during the night of Friday May 12 to Saturday May 13, it intercepted a targeted cyberattack on the French (Beaupréau), German (Willich) and Tunisian (Zriba) sites of the electronics activity.
The company said it immediately took measures to secure all the Group’s other sites.
“Prior to restarting the systems of these sites, investigations are underway to ensure that the attack is completely contained,” the company said in a statement. “However, some local infrastructures have been encrypted and an analysis is also being carried out to identify any exfiltrated data.
The activity of these three sites represents 19 percent of the group’s total sales in 2022. The company does not feel there will be any significant impact on the performances for the Group.

read more

Hackers Shut Down Production at Cartonnerie Gondardennes in France

October 28, 2022

A cardboard box manufacturer in Wardrecques, France was hit by a cyberattack, most likely ransomware (Fr: “piratage”). Production was shutdown, and workers sent home. News reports are all in La Voix Du Nord which unfortunately is paywalled, but the headlines and synopsis says enough. The company’s systems were decrypted by a journalist, Damien Bancal, and ransom was not paid.

read more

Ransomware Attack Erases Ambulance Appointments for Next Few Weeks

December 6, 2022

The Trois Cantons ambulances in Peyrehorade were the victims of a ransomware attack. They have lost all their files and appointments for the next few weeks. It is not known which patients were scheduled, or at what times. Telephone numbers are also lost. Patients are invited to call the Three Cantons ambulances as soon as possible on 05 58 73 00 63. The ambulances operated on Wednesday, December 7 “pencil and paper”.

read more

Cyberattack Forces French Hospital to Cancel Operations

December 5, 2022

Hospital Centre of Versailles, near Paris, canceled operations and transfer some patients due to a cyber attack suffered over the weekend.

The computers at the hospital were infected with ransomware, threat actors demanded a ransom.
“A ransom, the amount of which I do not know, has been requested but we do not intend to pay it,” assured Delepierre, who is also mayor of Chesnay-Rocquencourt. Health Minister Francois Braun told AFP that six patients had been transferred from the beginning of the attack evening, three in intensive care and three from the neonatal unit.

The hospital is still facing problems and we cannot exclude that other patients will be transferred in other structures. “While the machines were still functioning in the intensive care unit, more people were needed to watch the screens as they were no longer working as part of a network, Braun said.” reported AFP.

In France, the law prohibits public establishments to pay ransoms.

read more

IT Systems of Hydraulic Office of Corsica Attacked by Ransomware

November 3, 2022

The Hydraulic Office of Corsica was hacked on the night of November 2 to 3. The agents were faced with 33 completely blocked computer systems. They immediately took them offline after the malfunctions were noted. A ransom, the amount of which has not been disclosed, has been demanded.

Two weeks after the event the company published a press release. They needed time to analyze and evaluate the damage on IT infrastructures,. And needed the time to assess the damage before deciding what to do. The company stated that essential activities are carried out normally, and “those relating to customer management will quickly be back to normal” . The problem remains mainly with the accounting and financial management of the organization. A large part of the historical data has been encrypted, “making this data inaccessible at this moment” .

read more

French Oncology Hospital Suspends Treatments for 4 Days after Ransomware Attack

November 15, 2022

Saint-Jean Oncology and Radiotherapy Center was the victim of a ransomware-type cyberattack affecting its Saint-Doulchard and Moulins sites. This paralyzed its information system. It affected all data, in particular patient files (administrative data, medical and technical data).

The Center was forced to suspend its chemotherapy and radiotherapy activities from November 15 to 18, 202 . For these services access to the computerized patient file is essential (ballistics, assays, reports, etc.).

read more