CPAS de Rebecq

Summary

The Public Center for Social Welfare (CPAS) in the Belgian municipality of Rebecq was targeted in a cyberattack, with the incident reported in late April. The attack disrupted the operations of the social services office, though specific details regarding the nature of the intrusion, the threat actors involved, and the extent of the damage were not disclosed in the initial reporting.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

The CPAS de Rebecq, a Belgian public social services institution, became the target of a cyberattack reported in late April 2025. The incident was brought to public attention through a news article published by Sudinfo dated 2025-04-30, with the incident referenced as having occurred around 2025-04-24. As a Centre Public d'Action Sociale, the organization is responsible for delivering social assistance and welfare services to local residents in the Rebecq municipality, which makes the incident particularly relevant to the continuity of public services in the area. The article announcing the attack is brief and does not elaborate on specific technical details.

According to the available source material, no additional information regarding the precise nature of the cyberattack, the systems affected, or the data potentially compromised is provided. The single available source consists primarily of surrounding content such as sponsored links, related article headlines covering unrelated Belgian news topics, and user account engagement prompts. These surrounding elements do not contribute substantive details about the incident itself and cannot be relied upon for an accurate chronology of events.

Because the source evidence is limited to a single headline-level confirmation that a cyberattack occurred against the CPAS de Rebecq, a detailed factual chronology involving detection timestamps, attacker actions, affected systems, containment steps, or remediation activities cannot be constructed without speculation. The narrative that can be provided must therefore remain confined to what the source explicitly confirms: the institution was the victim of a cyberattack reported in late April 2025, and the matter was covered by Belgian regional media. No further sequence of events, scope, or response actions are documented in the available material.

Sources

Sources available to members: 1 source.