Cyber Incident Victim: Sens
Date:
Mar 2022
Location:
France
Summary
The City of Sens experienced two separate cyberattacks occurring over a weekend and the following Monday. The municipality blocked affected software systems and implemented preventive security measures in response, maintaining heightened vigilance to counter potential future threats. No operational disruptions or data compromises were reported.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The city of Sens in France experienced two distinct cyberattacks in early March 2022. The initial intrusion occurred during the weekend of March 5-6, targeting municipal systems and software infrastructure. Three days later on March 7, a second attack struck in the late afternoon or evening, indicating a sustained threat campaign against local government networks. Municipal authorities led by Jean-Pierre Crost, deputy mayor responsible for communications and security, publicly acknowledged both incidents on March 9 while providing limited technical details about the attack vectors or perpetrator identities. The consecutive nature of these breaches within a 72-hour window suggested either coordinated targeting or exploitation of persistent vulnerabilities in Sens' digital infrastructure.
In response to these security events, municipal technicians immediately isolated and disabled the compromised software applications to contain potential damage. The city implemented unspecified preventive security measures following standard incident response protocols for government entities. No information was disclosed regarding operational disruptions to public services, data compromise, or financial impacts stemming from the attacks. Authorities maintained heightened vigilance against additional intrusion attempts while continuing standard municipal operations. The absence of ransom demands or explicit claims of responsibility in available documentation leaves the attackers' motivations unconfirmed through official channels.