Wibaie
Incident posture
Timeline
Summary
Wibaie, a subsidiary of Groupe Liébot and a major producer of windows and entry doors located in Cholet, suffered a cyberattack that halted its factory operations. The attack left approximately 600 employees idle and the plant's parking lot nearly empty as officials confirmed they were dealing with a cybercriminal group and experts were engaged to resolve the incident.
Motives
Detailed motive labels are available to members.
TTPs
Detailed technique labels are available to members.
Description
On the night of Wednesday 9 July to Thursday 10 July 2025, Wibaie, a subsidiary of Groupe Liébot based in Cholet, Maine‑et‑Loire, experienced a cyberattack. The company’s communication manager, Edith Chouteau, confirmed that the organization had been victimized by a group of cybercriminals. Following the incident, Wibaie initiated an operation involving external cybersecurity experts to investigate and respond to the breach. The attack was detected early on Thursday morning, prompting immediate internal alerts.
As a result of the cyberattack, the Wibaie production facility was placed under a total shutdown starting Thursday morning. Approximately six hundred employees were immobilized and unable to perform their duties during the stoppage. The company parking lot in Cholet was reported to be nearly empty, reflecting the workforce absence. Wibaie’s management stated that the situation was expected to evolve in the coming days as the response operation progressed. No further details regarding the attack vector, malware used, or specific data compromised were disclosed in the available source. The incident prompted coordination between Wibaie internal teams and external cybersecurity experts to contain and investigate the breach.
Sources
Sources available to members: 1 source.