La Banque Postale

Summary

La Banque Postale reported that a suspected distributed denial‑of‑service attack rendered its mobile app, online banking space and website inaccessible, while in‑person branches remained open for transactions. The attack also disrupted La Poste’s online mail and payment systems, delaying package deliveries and making internal tracking unavailable, though letters could still be mailed. The bank redirected payment approvals to text messages and said its teams were working to restore service. No group claimed responsibility and officials said there was no evidence of customer data theft.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On Monday, December 23, 2025, La Poste announced a “major network incident” that disrupted all of its information systems, including its online mail services, website, mobile app, and the online banking arm La Banque Postale. La Banque Postale issued a statement saying the cyberattack temporarily made customers’ access to their mobile app and online banking space unavailable. The disruption also delayed package deliveries and online payment systems during the holiday season, occurring just three days before Christmas. While online channels were inaccessible, La Poste noted that customers could still carry out banking and postal transactions in person, and letters—including holiday greeting cards—could continue to be mailed and delivered. The incident remained unresolved for more than eight hours into Monday evening, affecting a organization that delivered 2.6 billion packages the previous year and employs over 200 000 people. La Poste characterized the event as a distributed denial‑of‑service attack that rendered its online services inaccessible but emphasized there was no impact on customer data; transactions requiring tracking or internal system access, however, were impossible.

In response, La Banque Postale informed customers that they were blocked from using its application to approve payments or conduct other banking services and that the bank had redirected approvals to text messages instead. The bank posted on social networks that its teams were mobilized to resolve the situation quickly. La Poste’s spokesperson told BFMTV that the outage was due to a DDoS attack, and the company had previously anticipated handling nearly 180 million parcels during the November‑December peak period. The attack added to a series of recent cybersecurity incidents in France, including a breach of the Interior Ministry’s email accounts in which a 22‑year‑old suspect was detained and a suspected remote‑control software plot on an international passenger ferry involving a Latvian crew member in custody. Officials did not comment on the perpetrator of the La Poste incident, while Paris prosecutors examined the case and workers at a southern Paris post office questioned whether the attack could be linked to Russia, a disgruntled customer, or a colleague. France and its European allies have alleged that Russia is waging hybrid warfare against them, though no group claimed responsibility for the La Banque Postale disruption.

Sources

Sources available to members: 3 sources.