Cyber Incident Victim: Ville de Fouesnant, Communauté de communes du pays fouesnantais (CCPF)
Date:
Dec 2023
Location:
France
Summary
The municipality of Fouesnant and its intercommunal authority suffered a large-scale cyberattack disrupting most IT systems, rendering municipal services inoperable except for state-secured passport and ID processing. Both entities maintained public access with degraded operations, advising residents to postpone non-urgent requests as officials isolated systems to assess damages, characterizing the incident as criminal banditry without specifying restoration timelines.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The cyberattack targeting Ville de Fouesnant and the Communauté de communes du pays fouesnantais (CCPF) was first detected on or around December 29, 2023. Roger Le Goff, mayor of Fouesnant and president of CCPF, characterized the incident as a large-scale attack impacting all municipal IT systems except the passport and national identity card service, which remained operational due to its isolation on a state-secured line. Physical and telephone reception services at Fouesnant’s town hall continued without interruption during regular hours. The attack disrupted administrative functions in the 10,000-resident municipality, forcing officials to advise citizens to postpone non-urgent requests. Initial containment measures involved disconnecting affected systems to isolate the breach and assess damage.
CCPF’s intercommunal services experienced parallel disruptions, affecting the Centre intercommunal d’action sociale and Les Balnéides aquatic center, though both facilities maintained public access with degraded operational capacity. The attack’s origin and intrusion methods remained unspecified in available reports, with no ransomware groups or data exfiltration claims publicly documented. Municipal and intercommunal technical teams conducted ongoing forensic analysis as of January 2, 2024, without establishing a projected restoration timeline. Le Goff described the incident as criminal banditry rather than attributing it to specific threat actors. The attack’s operational consequences persisted into the new year, with no evidence of restored systems or secondary incidents reported in the immediate aftermath.