Cyber Incident Victim: SEMCO Technologies
Date:
Jul 2025
Location:
France
Summary
SEMCO Technologies experienced a cyberattack by Russian hackers during its Euronext IPO, resulting in the theft of employee personal data including passports and invoices, with some files published on a darknet site. The company confirmed the incident, implemented containment measures, and stated that operational functions were unaffected; the attack did not disrupt the successful IPO, which raised €45 million with investor demand significantly exceeding available shares.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 0 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On July 7, 2025, French semiconductor startup Semco Technologies confirmed a cyberattack by Russian hackers during its initial public offering process on Euronext. The attackers compromised employee personal data, including passports and invoices, subsequently publishing stolen files on a darknet site accessible to journalists. Semco detected the intrusion while preparing for its Euronext Growth listing and implemented containment measures to limit operational impact. Company representatives emphasized that critical equipment functionality and business operations remained unaffected throughout the incident. The breach occurred amid Semco's final IPO preparations, though the extortion attempt remained confidential until public disclosure.
Despite the cybersecurity incident, Semco Technologies successfully completed its stock market debut on July 4, 2025, raising €45 million with investor demand exceeding share availability by 5.6 times. Trading commenced as scheduled on July 9 on Euronext Growth following the security breach disclosure. The published darknet data confirmed unauthorized access to sensitive personnel documentation, though corporate systems supporting manufacturing and financial operations maintained continuity. No additional disruptions to supply chains, customer operations, or stock exchange activities were reported following the containment measures. The Montpellier-based company proceeded with all scheduled business milestones without postponement or operational degradation following the attack.