Article Details

Scrape Timestamp (UTC): 2024-04-12 05:36:11.867

Source: https://www.theregister.com/2024/04/12/french_municipalities_cyberattack/

Original Article Text

Click to Toggle View

French issue alerte rouge after local governments knocked offline by cyber attack Embarrassing, as its officials are in the US to discuss Olympics cyber threats. Several French municipal governments' services have been knocked offline following a "large-scale cyber attack" on their shared servers. The attack remains ongoing according to the city of Saint-Nazaire, one of the affected governments. "The services of the two communities cannot operate normally," the city told residents in an alert, referring to both the city and agglomeration of Saint-Nazaire. Other affected municipalities include Montoir-de-Bretagne, Donges, La Chapelle-des-marais and Porniche, as well as Sonadev and the Agency for the Sustainable Development of the Saint Nazaire Region. "At this stage, the origin of the cyber attack is unknown, as is the duration," according to the notice, which said the city and agglomeration of Saint-Nazaire would post updates on social media and government websites as services resume. While there's no word as to the nature of the incident, the outages follow a massive distributed denial of service (DDoS) attack that flooded several French government websites with bogus traffic on March 11 and 12, but did not disrupt government services. Anonymous Sudan claimed to be behind the flood of network traffic. This is one of the several pro-Russia second-rate hacktivist crews that emerged during the Russia-Ukraine war and reportedly has ties to the Killnet gang. Just days after the DDoS incident, France Travail – the government department responsible for registering and assisting unemployed people – disclosed a huge data breach that exposed upwards of 43 million citizens' private information dating back 20 years. Names, dates of birth, social security numbers, France Travail identifiers, email addresses, postal addresses, and phone numbers were compromised, according to the department. A month earlier, massive data breaches at France's Viamedis and Almerys, two third-party payment providers for health care and insurance companies, leaked data belonging to more than 33 million people. The timing of these cyber attacks is worrisome for French officials, as the country gears up for the summer Olympics – and anticipates a deluge of hacking attempts around the Paris Games. French president Emmanuel Macron has warned he has "no doubt whatsoever, including in terms of information," that Russia will target the Paris Olympics. Russian athletes will compete in the Games, but not under the Russian flag – the country has been banned from participating because of its illegal invasion of Ukraine. Also this week, French cyber security officials visited Washington, DC, to consult with their American counterparts and cyber security firms on Olympics-related cyber threats and how to avoid any disruptions from government-backed gangs and hacktivist crews.

Daily Brief Summary

CYBERCRIME // French Municipal Governments Crippled by Ongoing Cyber Attack

Multiple French municipal governments, including Saint-Nazaire, are experiencing severe service disruptions due to a large-scale cyber attack on shared servers.

The origins and duration of the cyber attack are currently unknown, with updates being provided via social media and governmental websites.

The cyber attack has affected a number of cities and organizations, disrupting essential services across various municipalities.

This cyber disturbance follows a recent DDoS attack, claimed by Anonymous Sudan, which targeted French government websites without disrupting services.

Concurrently, France Travail disclosed a significant data breach, compromising personal data of approximately 43 million citizens.

Additional data breaches in the past month have exposed over 33 million people’s data through attacks on third-party healthcare and insurance payment providers.

The timing of these cyber events is particularly sensitive as France prepares for the upcoming Summer Olympics, heightening concerns about potential cyber threats.

French cyber security officials are actively consulting with U.S. counterparts to strategize on protecting the Olympics and other critical infrastructure from expected cyber attacks.