Cyber Incident Victim: Communauté de communes de Gevrey-Chambertin et de Nuits-Saint-Georges
Date:
Mar 2024
Location:
France
Summary
The Communauté de communes de Gevrey-Chambertin et de Nuits-Saint-Georges experienced a cyberattack involving a virus that compromised its information systems, causing significant operational disruptions. All applicative servers and telephony services were initially rendered inoperative, though email communications remained functional and physical access to administrative sites was maintained. Partial restoration of telephony services occurred subsequently, though residual technical issues persisted while recovery efforts for servers continued. The incident potentially affected the Espace Citoyen platform and prompted engagement with the Regional Cybersecurity Center. Restoration work remains ongoing through coordinated efforts with technical partners to fully resume normal operations.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The Communauté de communes de Gevrey-Chambertin et de Nuits-Saint-Georges experienced a cyberattack during the night preceding March 19, 2024, compromising its administrative information systems. A virus infiltrated the infrastructure, causing significant operational disruptions across multiple services. By the morning of March 19, all application servers and telephone systems were rendered inoperable, forcing staff to rely on email for external communications. The attack potentially affected the Espace Citoyen platform, though email systems remained functional at the time of initial reporting. Citizens needing assistance were directed to use generic contact addresses or visit physical locations in Gevrey-Chambertin and Nuits-Saint-Georges, with operating hours published on the organization’s website. The intercommunal technical center and France Services office maintained in-person availability despite the digital outage. Authorities promptly notified the Centre Régional de Cybersécurité (Regional Cybersecurity Center) and mobilized internal teams and external partners to address the incident.
By March 20, 2024, telephone services had been partially restored, though intermittent difficulties persisted. Restoration efforts remained focused on rebuilding affected servers to normalize administrative operations. The organization issued regular updates through its website, confirming ongoing work to resolve residual technical challenges. No data theft or specific attacker motives were disclosed in available communications. Service disruptions primarily impacted internal coordination and public access to telephonic support, while critical functions like youth services maintained limited availability via dedicated email channels. The incident required sustained collaboration between municipal technicians and cybersecurity partners to achieve incremental recovery milestones over a multi-day period.