started · updated
France launches REACTIV unit following major state cyberattacks
France is intensifying its national cybersecurity response following a series of significant data breaches targeting public institutions. A major investigation by the Senate revealed that the Direction Générale des Finances Publiques (DGFiP) suffered multiple intrusions, including an incident between June 23 and 25 where a hacker used stolen agent credentials to access the tax data of approximately 350,000 individuals and 250,000 professionals. A subsequent breach in late July compromised cadastral data for 435,000 households.
In response, the National Cybersecurity Agency of France (ANSSI) has launched REACTIV (Reponse & Action Interministérielle face aux Violations de données). This new operational unit is designed to provide a more rapid and directive response to state-level cyberattacks, granting ANSSI the power to mandate immediate security measures within government ministries.
Separately, the G7, under France's presidency, has issued an urgent call for organizations to begin migrating to post-quantum cryptography to mitigate future threats from quantum computing. Meanwhile, judicial authorities have identified cybercriminals known as 'ChatNoir' and 'Casquette' as suspects in the recent DGFiP hacking incidents.
Entities
ANSSI · BelGaN · DGFiP · Direction Générale des Finances Publiques · France · G7 · GaNkool · Sébastien Lecornu · ZeroBytes
Claims
What the coverage asserts, and how many sources carry each claim.
- [○ 1 SOURCE] The first incident, occurring between June 23 and 25, allowed a hacker to access tax information concerning approximately 350,000 individuals and 250,000 professionals. www.capital.fr
- [● 2 SOURCES] France has inaugurated REACTIV, a new interministerial unit led by ANSSI to respond to data breaches and secure government IT infrastructure. www.frandroid.com · www.generation-nt.com
- [○ 1 SOURCE] Amélie Verdier stated that passwords were likely stolen via malware on agents' personal equipment. www.capital.fr
- [○ 1 SOURCE] A separate intrusion in late July or early August resulted in the theft of cadastral data affecting approximately 435,000 households. www.capital.fr
- [○ 1 SOURCE] The attack reportedly began with the theft of a public agent's credentials, which allowed the hacker to progress through various state IT systems. www.capital.fr
- [● 2 SOURCES] The REACTIV unit grants ANSSI the authority to force ministries to implement immediate security measures within constrained deadlines. www.frandroid.com · www.generation-nt.com
- [○ 1 SOURCE] Authorities have implicated two cybercriminals known as 'ChatNoir' and 'Casquette' in the recent DGFiP hacking incidents. www.zdnet.fr
- [○ 1 SOURCE] ANSSI and the G7 have issued a call to action for public and private organizations to prepare for the transition to post-quantum cryptography. cryptoast.fr