Cyber Incident Victim: Institut des hautes études des communications sociales
Date:
Aug 2024
Location:
Belgium
Summary
A Brussels-based communications and journalism institute experienced a ransomware attack following a suspected phishing incident, resulting in compromised IT systems. Malicious software encrypted and held institutional data hostage, disrupting operations at the affected higher education establishment. The attack targeted critical infrastructure, though specific ransom demands or data exfiltration details remain unconfirmed in available reports.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On August 6, 2024, the Institut des hautes études des communications sociales (IHECS) publicly confirmed it had suffered a ransomware attack compromising its IT systems. Jean-François Raskin, the institution's administrator general, stated the incident likely originated from a phishing operation that enabled threat actors to deploy malicious software. The attack resulted in the encryption of institutional data and the effective hostage-taking of IHECS's digital infrastructure. While the exact timeline of initial intrusion remained unspecified, the disclosure followed the confirmed infection of systems supporting the Brussels-based journalism and communications school. No details emerged regarding the specific ransomware variant used or whether attackers issued explicit ransom demands alongside the encryption event.
The incident disrupted normal operations at IHECS, though the full scope of affected departments or academic functions went unelaborated in initial reports. Institutional representatives did not describe containment measures, forensic investigations, or data recovery efforts undertaken following system compromise. Public confirmation served as the primary documented response action, with no indication of external law enforcement engagement or third-party incident response collaboration. Consequences centered on operational paralysis caused by encrypted systems, with no verified claims regarding data exfiltration or secondary exploitation of stolen information. IHECS did not specify projected recovery timelines or immediate academic continuity plans for students and faculty impacted by the attack.