CSIDB logo
Incident

Wibaie

Incident posture

Attack window
Jul 2025
Location
France
Status
Ongoing
CIA posture
Available to members
Updated
2026-09-21 13:16

Linked entities

Victim
Wibaie
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Jul 2025
Discovered
Undetermined
Disclosed
Oct 2025
Resolved
Pending

Summary

Wibaie, a subsidiary of Groupe Liébot and a major producer of windows and entry doors located in Cholet, suffered a cyberattack that halted its factory operations. The attack left approximately 600 employees idle and the plant's parking lot nearly empty as officials confirmed they were dealing with a cybercriminal group and experts were engaged to resolve the incident.

Motives

Detailed motive labels are available to members.

0 motives

TTPs

Detailed technique labels are available to members.

0 techniques

Description

On the night of Wednesday 9 July to Thursday 10 July 2025, Wibaie, a subsidiary of Groupe Liébot based in Cholet, Maine‑et‑Loire, experienced a cyberattack. The company’s communication manager, Edith Chouteau, confirmed that the organization had been victimized by a group of cybercriminals. Following the incident, Wibaie initiated an operation involving external cybersecurity experts to investigate and respond to the breach. The attack was detected early on Thursday morning, prompting immediate internal alerts.

As a result of the cyberattack, the Wibaie production facility was placed under a total shutdown starting Thursday morning. Approximately six hundred employees were immobilized and unable to perform their duties during the stoppage. The company parking lot in Cholet was reported to be nearly empty, reflecting the workforce absence. Wibaie’s management stated that the situation was expected to evolve in the coming days as the response operation progressed. No further details regarding the attack vector, malware used, or specific data compromised were disclosed in the available source. The incident prompted coordination between Wibaie internal teams and external cybersecurity experts to contain and investigate the breach.

Sources

Sources available to members: 1 source.

CSIDB