Cyber Incident Victim: Direction des Infrastructures, de la Topographie et des Transports Terrestres
Date:
Jul 2025
Location:
New Caledonia
Summary
A cyberattack targeted the Direction des Infrastructures, de la Topographie et des Transports Terrestres, compromising systems related to vehicle registrations and driver's license data. Government cybersecurity teams immediately implemented containment measures to secure external application access and prevent further spread while launching an investigation with national authorities to determine the attack's origin, assess potential impacts, and strengthen existing security protocols. The agency filed a judicial complaint and committed to providing ongoing updates as the investigation progresses.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On July 9, 2025, the Direction des Infrastructures, de la Topographie et des Transports Terrestres (DITTT) of New Caledonia experienced a cyberattack targeting systems managing vehicle registrations and driver’s license data. The New Caledonian government publicly confirmed the incident in a July 11 statement, revealing that cybersecurity teams detected unauthorized activity and immediately implemented containment protocols. These measures focused on securing external access points to the agency’s applications from outside New Caledonia to prevent further network propagation. Initial assessments indicated the attackers specifically sought administrative data related to vehicle registration documents and driving permits, though the extent of compromised information remained undetermined at the time of disclosure.
Government cybersecurity personnel initiated forensic analysis while maintaining operational isolation of affected systems. A formal investigation was launched in coordination with French national authorities to identify the attack’s origin, evaluate potential damages, and strengthen existing security infrastructure. The DITTT filed a criminal complaint with judicial authorities following standard incident response procedures. Ongoing impact assessments prioritized determining whether sensitive citizen data was exfiltrated or altered during the breach. The agency committed to providing periodic updates as the technical and judicial investigations progressed, emphasizing efforts to reinforce cybersecurity defenses against future intrusions. No operational disruptions to vehicle registration or licensing services were reported in the immediate aftermath.