Grand Cercle, Poker Bowl

Summary

Two casinos in Aix-les-Bains, Grand Cercle and Poker Bowl, were targeted in a ransomware attack that encrypted server data, forcing a temporary shutdown before partial reopening with slot machines restored while other services remained disrupted. The establishments reported significant operational losses and initiated a criminal complaint, with France's specialized cybercrime unit Ofac leading the investigation under Paris prosecutors. Management stated immediate containment measures limited the threat's spread, though recovery efforts continue to fully resolve the incident.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On July 18, 2024, the Grand Cercle and Poker Bowl casinos in Aix-les-Bains, Savoie, experienced a ransomware attack that encrypted data on their servers, forcing both establishments to suspend operations immediately. A police source confirmed the incident involved malicious actors compromising the casinos' systems through data encryption techniques. The casinos filed formal complaints with authorities and remained closed until July 22 while addressing the breach. During the closure, management implemented containment measures described as effective in "rapidly juggling the threat" according to a joint statement, though technical teams continued working to fully resolve lingering issues. No details were disclosed regarding the specific datasets affected or the attackers' ransom demands.

Partial operations resumed on July 22 at 10:00, with slot machines reactivated while other services remained offline indefinitely. The Paris prosecutor’s cybercrime unit and Ofac (Office anti-cybercriminalité) assumed control of the investigation, examining the attack’s origins and methods. A source close to the investigation highlighted "non-negligible operational losses" for both casinos, though no financial estimates were provided. Management maintained public communication through joint updates, emphasizing ongoing remediation efforts without specifying restoration timelines for unaffected services. The casinos’ reopening marked a transitional recovery phase as forensic work and system repairs continued under law enforcement oversight.

Sources

Sources available to members: 1 source.