La Rochelle

Summary

A cyber attack targeted La Rochelle and its agglomeration, rendering computer networks inaccessible and disrupting municipal services. The incident mirrored a prior attack on Évreux's networks, though no confirmed link between the threat actors was established. Operational functions across the affected regions were significantly impaired due to the network compromise.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On December 28, 2020, the computer networks of La Rochelle City and its Agglomeration became inaccessible following a cyberattack, disrupting municipal functions. The incident was reported by Franceinfo, though specific technical details regarding the attack vector or initial intrusion method were not disclosed in available sources. Municipal services experienced operational interruptions, mirroring disruptions observed in a separate cyberattack targeting Évreux and its agglomeration ten days earlier on December 18. No confirmed information was publicly released regarding the duration of network inaccessibility or the precise scope of compromised systems within La Rochelle’s infrastructure. The attack occurred amidst broader concerns about ransomware targeting French municipalities, though no explicit attribution or ransomware variant was formally linked to this incident by official sources cited in the reporting.

The parallel between the La Rochelle and Évreux incidents prompted media speculation about potential connections to the same threat actor(s), but no evidence confirming this hypothesis or identifying specific adversaries was presented in the source material. No ransom demands, payment amounts, or communication channels were disclosed in relation to the La Rochelle attack. Public reporting did not describe containment measures, forensic investigations, or recovery timelines undertaken by the city’s technical teams. The disruption highlighted vulnerabilities in local government networks, though La Rochelle’s specific mitigation actions or coordination with national cybersecurity agencies remained unverified in the immediate aftermath. Service restoration progress and long-term impacts on municipal operations were not detailed in the available public records at the time of reporting.

Sources

Sources available to members: 1 source.