Group DIS

Group DIS, also known simply as DIS, is an information technology service provider headquartered in France. The company provides IT solutions and support to customers, as shown by its client base that includes private enterprises and public sector entities. Its headquarters location in France places it within the French technology services sector. The organization operates under the aliases Group DIS and DIS in public reporting and industry references.

On May 12, 2023, Group DIS became the target of a ransomware attack carried out by the Alphv/BlackCat criminal group. The attackers exfiltrated several terabytes of data, which they described as containing critical customer information. After allegedly refusing to meet a ransom demand to protect the stolen data, the threat actors publicly claimed responsibility for the breach. Subsequently, the attackers leaked the exfiltrated information on a public leak site.

The ransomware incident caused widespread service outages for numerous clients of Group DIS. Among the affected customers were Lacroix Electronics, a private electronics manufacturer, and several regional government websites. The outages disrupted normal operations for both commercial and public‑sector clients that rely on the provider’s IT services. This demonstrates that Group DIS serves a mixed portfolio of business and governmental accounts.

The attack was reported by the French technology news outlet LeMagIT, which provided details on the timeline and the actors’ claims. No further public disclosures regarding the company’s size, revenue, ownership structure, or subsidiary relationships are available in the cited source. Consequently, specifics about employee count, annual turnover, or parent‑company affiliation remain undocumented in the provided material.

Despite the lack of detailed corporate metrics, the confirmed facts establish Group DIS as an IT service provider that experienced a significant ransomware breach in mid‑2023. The incident illustrates the impact that a ransomware breach can have on an IT service provider and its clients. No additional information about the organization’s current status or subsequent remedial actions is present in the supplied sources.