Roularta Media Group

Summary

Roularta Media Group experienced a distributed denial of service attack that flooded its servers with traffic, disrupting the websites and internal systems of its media brands as well as the operations at its printing facility. The overload caused accessibility issues for sites such as Knack and Libelle and delayed the distribution of newspapers and magazines. The company confirmed there is no evidence of ransomware involvement and stated that its teams, supported by IT provider Proximus, are working to restore normal service.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On June 10 2025 Roularta Media Group announced that its information technology infrastructure had become the target of a cyberattack. The company disclosed that the attack consisted of ongoing Distributed Denial of Service (DDoS) activity in which its servers were continuously flooded with traffic, causing overload and disrupting access to its websites and applications. The affected online properties included the corporate site and the digital platforms of its media brands such as levif.be, femmesdaujourdhui.be, Knack and Libelle. In addition to the public‑facing services, parts of Roularta’s internal operations were also impaired by the traffic surge. The group emphasized that, at the time of the announcement, there was no indication that the incident involved ransomware or any attempt to extort payment for data.

The DDoS flood also reached the operations of Roularta Printing, the group’s printing facility located in Roeselare (referred to as Roulers in the French‑language source). As a consequence of the disruption to the printing workflow, the company warned that readers might experience a slight delay in receiving their newspapers or magazines that week. Jeroen Mouton, the Chief Operating Officer of Roularta Media Group, stated that the organization’s teams were doing everything possible to resolve the issue as quickly as feasible. He noted that the company could rely on the experienced support of its IT provider, Proximus, to assist in mitigating the attack and restoring normal service. Contact details for Mr. Mouton were provided, including his email address and telephone number, for any further inquiries regarding the incident. The statement concluded with an affirmation that the group remained focused on resolving the disruption and minimizing any impact on its audience and internal functions.

Sources

Sources available to members: 2 sources.