Naval Group

Summary

Naval Group was the target of a claimed cyberattack in which confidential data were allegedly exfiltrated, including a top‑secret submarine and frigate combat management system with its source code, classified technical documents, and developer virtual machines containing French navy simulators. The company has not confirmed the breach but has activated its internal computer emergency response team to investigate the incident. It highlighted the growing cybersecurity challenges posed by rising geopolitical tensions and the increase in systemic attacks against defense contractors.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

A cyberattack against the French defense industrial company Naval Group was claimed in the night of July 22 to July 23, 2025. The claim was made public through online channels. According to the report, confidential data were allegedly exfiltrated during the incident. Naval Group has not issued an official confirmation of the attack.

Clément Domingo, a cybersecurity specialist cited in the article, stated that a top‑secret content management system for submarines and frigates, including its source code, was among the compromised assets. He also indicated that technical classification documents were taken. Additionally, Domingo said that virtual machines used by developers, which embed French naval simulators, were in the possession of the attacker. These items were described as being in the hacker’s hands.

In response, Naval Group activated its internal Computer Emergency Response Team (CERT) to investigate the allegations. The company has not confirmed that a breach occurred but is conducting an inquiry. Naval Group used the occasion to highlight the increasing cybersecurity challenges posed by rising geopolitical tensions. It also noted the growth of systemic attacks as a concern for the defense sector.

Sources

Sources available to members: 1 source.