Office national des anciens combattants et des victimes de guerre

Summary

A cyberattack disrupted the information systems of the Office national des anciens combattants et des victimes de guerre (ONACVG), prompting immediate involvement from national cybersecurity authorities and specialized IT teams to secure servers. While core pension payments managed by the Ministry of Armed Forces remained unaffected, compensation disbursements to 687 beneficiaries under a specific law faced potential delays, impacting approximately €6 million in funds. The incident did not compromise the ministry's independent systems due to the organization's administrative separation.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

The cyberattack targeting the Office National des Anciens Combattants et Victimes de Guerre (ONACVG) commenced on Saturday, December 10, 2022, disrupting the organization's information systems and halting normal operations. The incident prompted immediate notification to France's Agence Nationale de la Sécurité des Systèmes d'Information (ANSSI) and the cybersecurity services of the Ministry of Armed Forces. ONACVG's internal IT teams, augmented by specialized external expertise, initiated emergency protocols to contain the breach. As a precautionary measure, all ONACVG servers were isolated and secured to prevent further unauthorized access or data exfiltration. The attack exclusively affected ONACVG's independent administrative systems, with no operational impact on the separate information infrastructure of the Ministry of Armed Forces. Technical recovery efforts remained ongoing as of December 14, 2022, though full restoration timelines were not disclosed in available reporting.

Primary operational consequences centered on delayed compensation payments to specific beneficiary groups. While combatant pensions and military disability payments administered directly by the Ministry of Armed Forces continued without interruption, the attack potentially delayed disbursement of funds allocated under the February 23, 2022 law compensating former French military auxiliaries in Algeria and their families. Approximately 687 beneficiaries reviewed the prior week by an independent commission faced possible payment postponements, representing €6 million in allocated funds. No evidence suggested compromise of personal data or financial information beyond the service disruption. ONACVG and supporting agencies maintained operational continuity for core veteran support functions not reliant on compromised systems. The Ministry of Armed Forces confirmed ongoing coordination between ONACVG's technical teams, ANSSI, and military cybersecurity units to restore systems while preserving forensic evidence for potential attribution investigations.

Sources

Sources available to members: 1 source.