Cyber Incident Victim: Ouest-France
Date:
Nov 2020
Location:
France
Summary
A French newspaper headquartered in Rennes suffered a cyberattack involving a powerful virus that disrupted its computer systems early Saturday morning. While the digital information platform remained unaffected, the incident compromised print operations, forcing reduced Sunday editions to maintain publication. This marked the second such attack on a French newspaper within a short timeframe, though details regarding the attacker's identity or motives remained undisclosed.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On November 21, 2020, the Ouest-France media group headquartered in Rennes experienced a disruptive cyberattack targeting its computer systems. The incident began in the early hours of Saturday morning when a particularly powerful virus infiltrated the organization's infrastructure, significantly disrupting operational capabilities. While the attack compromised internal systems critical to production workflows, the group's digital news platform—the Ouest-France website—remained unaffected and continued normal operations. The primary impact manifested in the newspaper's print production chain, with systems supporting physical edition preparation and distribution rendered inoperable by the malware infection. This disruption directly threatened the publication's ability to release its scheduled Sunday print editions.
In response to the attack, Ouest-France implemented emergency measures to maintain partial print distribution despite the compromised systems. The organization reduced the number of planned print editions for Sunday, November 22, prioritizing continuity of service over full production capacity. This adaptation ensured at least limited physical newspapers reached readers, though with reduced content availability compared to standard operations. No technical details regarding malware containment, system restoration processes, or forensic investigations were disclosed in available reporting. The incident marked the second cyberattack against a French newspaper organization within a short timeframe, though public reports contained no confirmed attribution, motive analysis, or evidence linking it to other attacks. Operational consequences remained confined to temporary print production limitations, with no reported data breaches, ransom demands, or secondary impacts on digital services.