Syndicat intercommunal pour l’informatique municipal

Summary

The Syndicat intercommunal pour l’informatique municipal experienced a cyberattack causing widespread disruptions to municipal services, including email processing, family portal access, school registrations, and invoice issuance. While no data exfiltration occurred, the incident required immediate containment efforts by IT teams collaborating with municipal partners. Most services resumed normal operations within weeks, though mail processing delays persisted. Temporary workarounds were implemented for critical functions like in-person registrations, while extended response times affected administrative communications during recovery.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

The Syndicat intercommunal pour l’informatique municipal (SIIM), an intercommunal IT union serving multiple municipalities, experienced a disruptive cyberattack during the weekend of March 11-12, 2023. The incident caused immediate malfunctions across various municipal applications, impacting operational activities in several member cities. Technical teams from SIIM and the Direction des systèmes d’information de la Ville de Gentilly initiated containment measures upon detection, securing systems to prevent further compromise. Initial analysis confirmed no exfiltration of personal data or individual information, though the attack significantly disrupted service delivery. Regulatory authorities were notified as required, with all legal protocols followed during the response phase.

Service disruptions persisted throughout March, affecting critical municipal functions. The family portal became completely inaccessible, forcing manual processing of school registrations and BAFA applications at physical service centers in Ivry-sur-Seine. Email systems experienced severe processing delays, extending response times for citizen inquiries. Invoice generation and distribution faced operational setbacks, causing financial administration delays. Restoration efforts occurred in phases, with partial service resumption beginning March 24, 2023, and full functionality projected for March 27. However, mail processing systems required extended recovery time, with Gentilly reporting residual disruptions through April 11, 2023. Municipalities implemented temporary manual procedures for essential services during the outage, including in-person document submissions for family quotient certificates and school enrollments. The prolonged recovery of correspondence systems led to continued public advisories about delayed request processing through mid-April.

Sources

Sources available to members: 2 sources.