Menu
Browse

Cyber Incident Victim: Dauphin Telecom

Date:

Apr 2023

Location:

France

Summary

Dauphin Telecom experienced a significant network disruption due to a DDoS attack targeting the submarine transport cable connecting the French Antilles to North America. The incident overwhelmed the network with malicious traffic, rendering it unavailable. The company's technical services implemented reinforced security solutions to guarantee data protection, which allowed for the full restoration of all services by the end of the following Monday.

CIA Posture Motives Tactics, Techniques & Procedures
Available to members 1 motive 1 technique
Threat Actors Type Location
0 actors Available to members Available to members

Description

On or around April 7, 2023, during the Easter weekend, Dauphin Telecom's network began experiencing significant disruptions. The company subsequently identified the cause of these service interruptions as a Distributed Denial-of-Service (DDoS) attack. This specific type of cyber attack functions by flooding a target network or website with a massive volume of malicious traffic. The objective of such an attack is to infiltrate and overwhelm the infrastructure's capacity, rendering it unavailable to legitimate users and disrupting normal operations. The primary target of this malicious activity was a critical piece of infrastructure: the transport cable that provides connectivity between the French Antilles and the North American continent. This cable is a vital communications link, and its impairment had direct and immediate consequences for network availability.

Cyber Incident Image

The attack resulted in widespread service disruptions across the Dauphin Telecom network. Customers experienced a loss of connectivity and an inability to access services due to the targeted overwhelming of the network's resources. The incident spanned the entire Easter weekend, indicating a sustained period of disruption that affected both residential and business customers reliant on this telecommunications link. The degradation of service on this international transport cable would have impacted not only internet connectivity but potentially also other data and voice services that depend on this foundational infrastructure. The timing of the attack, coinciding with a major holiday weekend, likely amplified its impact on users.

In response to the incident, Dauphin Telecom's technical services team initiated countermeasures. Their primary response action involved the implementation of reinforced security solutions. These solutions were specifically designed to guarantee data protection and to mitigate the flood of malicious traffic characteristic of a DDoS attack. The deployment of these enhanced security measures was a direct action taken to contain the attack and restore normal network operations. The company's efforts were focused on filtering the malicious traffic and fortifying the network against the ongoing attack vectors.

The restoration of services was a gradual process achieved through these technical countermeasures. By the end of Monday, April 10, 2023, Dauphin Telecom had successfully restored all services to their customers. The company acknowledged that the implementation of additional security solutions was still underway following the initial restoration, indicating a continued effort to bolster network defenses beyond the immediate containment actions. This phased approach suggests an initial emergency response to halt the attack and restore functionality, followed by a longer-term strategy to enhance overall security posture and prevent future similar incidents.

On April 9, 2023, Dauphin Telecom issued a public communication via a press release on its social media channels to inform its customer base and the public about the incident. This communiqué, dated for release on April 11, 2023, provided a factual review of the events and the situation. The press release served to formally attribute the network disruptions to the DDoS attack on the transport cable. It also included a definition of a DDoS attack, educating the public on the nature of the incident. The company committed to keeping its customers informed of the progress of the situation and provided a contact number, 0801 100 555, for customer inquiries. The communication expressed gratitude for customer understanding during the service outage. The issuance of this press release was a key component of the company's response, aimed at maintaining transparency and managing customer relations in the wake of a significant disruptive event.

Sources
Sources available to members
1 source