Frequence3

Frequence3 is a radio broadcasting organization headquartered in France, operating both traditional FM radio and web-based streaming platforms. Its core service involves the production and transmission of audio content to listeners via terrestrial broadcast and internet delivery, serving a French-speaking audience. The organization's operational model incorporates a hybrid infrastructure, relying on third-party hosting providers for its digital platforms, as evidenced by its inclusion among victims of a coordinated ransomware attack in early 2023. This incident directly impacted its ability to broadcast, confirming that its service delivery depends on external IT infrastructure for its web radio operations alongside its FM transmission capabilities. The attack caused a tangible disruption to its public-facing services, with the FM broadcast experiencing a 30-minute interruption before backup systems restored the signal, while its web radio platforms suffered more severe and prolonged outages.

The ransomware attack, claimed by the Nevada group, exploited vulnerabilities across multiple hosting providers, including Ikoula, compromising thousands of virtual machines and directly affecting Frequence3's data and systems. The attackers demanded a ransom of approximately €45,000 in bitcoin for data recovery, highlighting the financial extortion motive typical of such campaigns. For Frequence3, the incident underscored a critical dependency on its hosting partners' security posture, as the breach at the provider level cascaded into a service denial for its end-users. The differential impact—brief FM recovery versus multi-day web radio impairment—suggests varying levels of redundancy and disaster recovery preparedness between its broadcast and digital streaming arms. This event represents a significant cybersecurity incident in its operational history, publicly documented and attributed to a known threat actor, which provides a clear, evidence-based reference point for its risk exposure and the potential consequences of supply-chain attacks on its business continuity. The prolonged expected impairment of web radio functionality indicates a substantial recovery challenge, likely involving data restoration or system rebuilds from backups, if available.