2024 was a particularly dark year for cybersecurity in France. Cybercriminals stepped up their efforts, massively targeting public institutions, private companies, and citizens. While cyberattacks are now commonplace, the past year marked a turning point in the intensity and diversity of threats. From massive data leaks to distributed denial-of-service (DDoS) attacks, France suffered several major incidents, highlighting the vulnerability of systems and sensitive information.
Massive data leaks at Free
Free, another telecommunications giant, was also hit by two major personal data leaks in 2024. The information of 19 million subscribers was stolen, including sensitive banking data such as IBANs. This leak triggered a wave of panic, as the hackers quickly published a sample of 100,000 addresses on the Dark Web, creating an immediate risk of fraudulent direct debits.
The hacking of medical records
At the same time, a large-scale hack struck a Paris hospital through the Mediboard software. By exploiting compromised credentials, cybercriminals exfiltrated the medical records of 750,000 patients. This sensitive information was put up for sale on the Dark Web before mysteriously disappearing, leaving doubts about the ultimate purpose of the stolen data.
The France Travail hack
The intrusion into the systems of France Travail (formerly Pôle emploi) made waves because of the severity of the compromised data. More than 43 million French people had their information stolen, including their Social Security numbers. This hack was facilitated by compromised credentials of Cap Emploi advisors, allowing the hackers to slip into the systems and collect sensitive data, which was then sold on the Dark Web and used for targeted phishing attacks.
The hacks of healthcare service providers: Viamedis and Almerys
The year got off to a worrying start with the simultaneous hacking of two healthcare service providers, Viamedis and Almerys. In January, hackers exploited compromised credentials of healthcare professionals to access the personal data of more than 30 million French people. This information included Social Security numbers, health insurance details, and civil status data, paving the way for potential large-scale scams.
DDoS attacks against French ministries
The hacktivist group Anonymous Sudan stepped up DDoS attacks in March, targeting several French ministries, including the Ministry of the Economy and the Ministry of Ecological Transition. These attacks temporarily paralyzed government infrastructure, making some public services inaccessible for several days. Although two of the hackers were arrested by the FBI, these attacks highlighted the vulnerability of public institutions to this type of threat.
PlugX spy botnet
Another notable incident was the PlugX attack, a malware that compromised more than 3,000 computers in France. Used to create a botnet for espionage purposes, PlugX allowed cybercriminals to control machines remotely. This network of "zombie machines" was dismantled following a vast judicial operation, but it revealed the importance of strengthening security measures on individual devices.
Data leak at Sirius
The private sector was not spared either. Sirius, a French company specializing in online ticketing for events, was the victim of a major cyberattack. The hackers managed to access 5.9 million personal records belonging to French users. This information was put up for sale for $2,000 on the Dark Web, showing the scale of the risks for companies handling personal data.
The attack on the Assurance Retraite
In September, the Assurance Retraite (French state pension fund) was hit by a cyberattack, resulting in the theft of the personal information of 370,000 beneficiaries. Data such as addresses, Social Security numbers, and estimated income were stolen and shared on the Dark Web. This hack added a new layer of vulnerability to French people's information already compromised by other leaks.
The repeated hacks of SFR
The telecom operator SFR was the victim of a series of attacks in 2024. In June, a first hack allowed cybercriminals to access 1.4 million sensitive records of its subscribers, such as names, addresses, and geographic coordinates. Two months later, another theft affected 50,000 subscribers. The stolen information was put up for sale on hacking forums, increasing the scope of fraud risks.
DDoS attacks in response to the arrest of Pavel Durov
The arrest of Pavel Durov, the founder of Telegram, triggered a wave of DDoS attacks against French websites, including government platforms and European sites. This operation, called "FreeDurov", was intended to protest against Durov's arrest. The hackers paralyzed dozens of websites for several days, highlighting the impact that external events can have on a country's cybersecurity.
2024 was marked by a proliferation of cyberattacks targeting critical institutions, private companies, and individuals. The personal data of French people is increasingly exposed, and the consequences of these breaches go beyond the mere loss of information: they pave the way for phishing attacks, banking fraud, and reputational damage for companies.
In this context, cybersecurity has become a national priority. It is essential that businesses and citizens take preventive measures to protect themselves against these growing threats. Data backup and protection solutions, such as those offered by Kiwi Backup, are more crucial than ever to avoid becoming the next victim.