Cyber Incident Victim: Lycée Bascan
Date:
Mar 2024
Location:
France
Summary
A French high school experienced a cyberattack targeting its digital educational platform, disseminating terrorist threats attributed to the Islamic State. The compromised system displayed messages threatening mass explosions, beheadings of non-believers, and included a decapitation video. Multiple educational institutions in the region were affected, prompting psychological support deployment on-site and restricted access to facilities. Regional security forces conducted searches while maintaining academic operations, though student attendance became optional. Authorities initiated police and judicial interventions to address the incident and secure targeted locations.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On March 20, 2024, the Lycée Louis-Bascan in Rambouillet, Yvelines, experienced a cyberattack targeting its digital workspace (ENT), a platform used by educators, parents, and students for communication. Hackers infiltrated the system to disseminate a terrorist threat attributed to the Islamic State, which included a written message and a decapitation video. The threat, reviewed by multiple students, explicitly stated, "We come from the Islamic State [...] Tomorrow, Thursday, March 21, I will blow up the entire establishment [...] and I will behead all your bodies [...] to serve Allah." It further called for the killing of non-believers in Allah across approximately fifteen lines of text. The attack affected multiple schools in the Île-de-France region, with eight institutions in Yvelines confirmed as targets.
The incident triggered immediate security and psychological responses. Regional Security Brigades deployed personnel in unmarked vehicles and military gear to conduct searches at Lycée Bascan and other affected schools, while external visitors were barred from entering at least one Rambouillet-area college. A psychological support unit was established in the school infirmary. Valérie Pécresse, President of the Île-de-France Region, confirmed she had alerted police and judicial authorities, emphasizing the brigades’ role in "doubt clearance and site security." Despite operational disruptions, classes proceeded, though students were permitted to abstain from attendance. Parents gathered outside the school seeking information, reflecting widespread anxiety. The event compounded existing trauma at Lycée Bascan, where a physical education teacher had been murdered in a separate incident weeks earlier in Cernay-la-Ville. No direct link between the murder and the cyberattack was indicated in the available information.