Cyber Incident Victim: Grand Est
Date:
Mar 2023
Location:
France
Summary
A cyberattack targeted the municipal systems of Mont-Saint-Martin, prompting immediate defensive measures including the display of a maintenance notification on the town's website. Specialized personnel conducted server analysis and security enhancements, temporarily taking all IT systems offline and suspending digital services such as email and online administrative platforms. Municipal operations were disrupted, though in-person public services remained available. Authorities confirmed no compromise or theft of resident personal data during the incident.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On March 11, 2023, the municipal website of Mont-Saint-Martin (Meurthe-et-Moselle, Grand Est region) became inaccessible to visitors, displaying only a "Maintenance informatique" notification. The disruption originated from a cyberattack detected that Saturday when Thierry Marx, the city's webmaster, attempted to access the site during a break from his day off. Immediate containment measures were implemented, including taking all municipal IT systems offline to prevent further compromise. Technical teams initiated forensic analysis and security hardening procedures on the city's servers. The attack disrupted digital public services, forcing suspension of online platforms such as email communications and electronic administrative procedures.
Municipal authorities confirmed no corruption or theft of residents' personal data occurred during the incident. Physical public services at city hall remained operational despite the cyber disruption, with staff maintaining in-person assistance through adapted workflows. The extended IT outage affected all municipal departments reliant on digital systems, with no specified restoration timeline provided. Security investigations and system integrity checks continued beyond the initial incident response phase. The city issued public notifications through its maintenance page to inform citizens of service limitations while emphasizing continued commitment to essential operations during recovery efforts.