CSIDB logo
Incident

Groupe Beneteau

Incident posture

Attack window
Feb 2021
Location
France
Status
Historical
CIA posture
Available to members
Updated
2025-10-26 00:00

Linked entities

Victim
Groupe Beneteau
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Feb 2021
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

The Bénéteau boat company experienced a cyberattack detected overnight by its security systems, leading to immediate network shutdowns to contain the incident. This protective measure aimed to prevent further propagation of the attack, though specific operational impacts or data compromise details were not disclosed in initial reports. The company's communications department confirmed the incident shortly after detection.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

1 technique

Description

The Bénéteau company, a boat manufacturer headquartered in Saint-Gilles-Croix-de-Vie, Vendée, experienced a cyberattack detected overnight between Thursday, February 18, 2021, and Friday, February 19, 2021. The company’s security systems triggered alarms during this period, prompting immediate action by its technical teams. Upon identifying the intrusion, Bénéteau’s communications department confirmed the incident publicly on the evening of February 19. As a containment measure, the organization proactively shut down its entire network infrastructure to prevent the attack from propagating across systems. This response aimed to isolate compromised segments and limit further unauthorized access. The company did not initially disclose the specific attack vector or the identity of potential threat actors involved in the breach. No details were provided regarding whether data exfiltration, ransomware deployment, or other malicious activities occurred during the incident.

Bénéteau’s decision to disconnect networks represented a standard defensive protocol to contain cyber intrusions, though the action likely caused operational disruptions. The company did not release information about the duration of the outage, recovery timelines, or the scope of affected systems beyond the network shutdown. There was no public confirmation of data loss, financial impact, or service interruptions to customers or partners resulting from the incident. The communications department’s announcement focused solely on the detection timeframe and initial containment steps, offering no additional technical specifics or long-term consequences. The incident drew media attention through regional outlets like France Bleu, but Bénéteau maintained limited transparency regarding forensic findings or post-incident remediation efforts.

Sources

Sources available to members: 1 source.

CSIDB