La Compagnie du Lit

Summary

A ransomware attack on a French software-as-a-service provider disrupted the online operations of numerous retail clients, including La Compagnie du Lit, by encrypting part of its information system and making order processing impossible. The outage persisted for an extended period, causing widespread delays in customer communications and order fulfillment across the affected businesses. Despite technical recovery within weeks, the financial strain proved insurmountable, leading to the provider’s judicial liquidation and the loss of thirty‑eight jobs.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On 16 August 2024 the French software editor Octave, which provides SaaS retail solutions and hosts merchant websites for its clients, was victim of a ransomware attack that encrypted part of its information system and rendered several services unavailable. The attack was disclosed by security researcher Damien Bancal, who noted that the perpetrators had disabled a portion of Octave’s infrastructure, causing widespread disruption among the companies that rely on its platform. Despite the incident, Octave’s technical teams managed to restore the core systems within approximately six weeks, although the encryption had already caused significant operational downtime for its customers.

The disruption directly affected Octave’s clientele, which includes La Compagnie du Lit, La Casserolerie, Cash Piscines, Cultura, Lyophilisé & Co., Yvert & Tellier, Cobra, Agripartner and Kalico, among others. Clients reported delays in order processing and the inability to access their online storefronts; La Boutique du Tracteur, another Octave client, posted on Facebook that it could not respond to calls, messages or take orders and hoped for a swift recovery from its provider. The diffuser Makassar, specializing in comics and manga, also confirmed it was affected, while other clients such as Cobra and Rascol remained discreet about the nature of the problem but acknowledged delays in fulfilling requests. Numerous merchant sites hosted by Octave—including those of Sarodis, Daudin Distribution, Polemil Médical, Sofia Distribution, Mediconfort, Hyprodis and Agripartner—were reported as unavailable during the incident.

The economic repercussions of the attack proved insurmountable for Octave; after failing to meet its obligations to creditors from October 2024 onward, the company entered redressement judiciaire in November 2024. Despite a six‑month observation period, the tribunal of commerce d’Angers pronounced liquidation judiciaire on 19 March 2025, resulting in the loss of 38 jobs. La Compagnie du Lit, as one of Octave’s clients, experienced the service interruption and order‑processing delays described by other affected businesses, though no separate public statement from the company itself is recorded in the sources. The liquidation marks the end of Octave’s operations after the cyberattack devastated its financial stability despite its technical recovery efforts.

Sources

Sources available to members: 4 sources.