Cyber Incident Victim: France Télévisions
Date:
Apr 2015
Location:
France
Summary
A major cyberattack targeted French state television, resulting in the theft of personal data including names, contact details, and addresses from approximately 127,000 individuals, primarily comprising viewer participation requests and contact lists. The breach was attributed to the criminal hacking group Linker Squad, which exploited insufficient security safeguards to access and exfiltrate the information for financial gain through data sales. While no passwords or financial details were compromised, the incident occurred shortly after a separate disruptive attack on another French broadcaster, amplifying operational concerns. The organization confirmed the breach had been contained, notified affected individuals about potential phishing risks, and initiated legal proceedings by filing a criminal complaint.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On April 14, 2015, hackers breached France Télévisions' systems, stealing personal data including names, postal addresses, email addresses, and telephone numbers belonging to approximately 127,000 individuals. The compromised data consisted of 19,000 viewer requests for participation in televised games and 108,000 contacts dating back to March 2014. France Télévisions confirmed no passwords or financial information were accessed. Technical Director Stephane Van Bosterhaudt acknowledged existing security measures had been "insufficient" to prevent the intrusion. The attack occurred amid heightened cybersecurity concerns following an April 2015 cyberattack against TV5Monde, another French broadcaster that was forced offline for 18 hours by ISIS-affiliated hackers. Investigators attributed the France Télévisions breach to a criminal hacking group called Linker Squad, which specialized in exploiting system vulnerabilities for financial gain. This group had previously targeted commercial broadcaster TF1's digital properties in January 2015.
France Télévisions publicly disclosed the breach on April 15, 2015, stating the data leak had been contained. The broadcaster warned affected individuals to remain vigilant against potential phishing attempts leveraging the stolen contact information. Linker Squad members communicated to Belgian media outlet Soir.be their intention to sell the stolen data and publish portions online. France Télévisions announced plans to file a formal criminal complaint on April 17, 2015. The incident represented a significant operational security failure for the state broadcaster, particularly given its proximity to the politically motivated TV5Monde attack. While the breach didn't compromise critical broadcast infrastructure or financial systems, it exposed systemic vulnerabilities in personal data protection practices across French media organizations during this period.