Cyber Incident Victim: Ville de Chaville
Date:
Oct 2022
Location:
France
Summary
A municipality experienced a significant cyberattack causing severe disruption to municipal services, including email systems and online portals, though some functionality was later restored. Cybersecurity experts were engaged to assess damages and restore servers, while personal data potentially compromised in the breach remained unconfirmed. Town hall operations continued with modified hours for essential services, and citizens were directed to a temporary email address for urgent requests. Public updates were provided through official channels, with full recovery anticipated to require several additional days.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 6 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The Ville de Chaville municipal government experienced a disruptive cyberattack detected on or before October 28, 2022, prompting immediate engagement with cybersecurity experts to assess damages and restore compromised servers. Municipal operations faced severe paralysis following the incident, with critical services including the city's email system rendered inoperable. This outage significantly hindered public service delivery, forcing residents to rely on in-person visits to the town hall for essential civil status procedures during modified operating hours. A provisional email address was established for the Accueil Familles-Citoyenneté department to handle urgent requests like civil registry documents while primary systems remained offline. Technical recovery efforts prioritized server restoration, with the Portail Famille platform returning to functionality by October 28 as confirmed in the city's update, though full operational recovery was projected to require additional days.
Investigations revealed potential unauthorized access to personal data stored on municipal servers, though the city explicitly stated no confirmation existed regarding specific compromised datasets or their nature at the time of reporting. Cybersecurity teams remained actively engaged in forensic analysis to determine the attack's scope and data impact. Municipal authorities committed to notifying affected individuals should subsequent investigation yield actionable information about personal data exposure. The city maintained public communication through its official website and social media channels, advising residents of continuing service limitations while restoration work progressed. Operational disruptions persisted across multiple departments despite partial system recoveries, underscoring the attack's sustained impact on administrative functions and citizen services during the response phase.