{"title":"Incidents in France","description":"Breaches and advisories naming victims in France.","home":"https://vulnpocalypse.dev/feeds/","items":[{"id":"https://vulnpocalypse.dev/advisories/bank-info-security-reports-french-bank-lost-100-million-euros-in-cyberattack/","title":"Bank Info Security reports French bank lost 100 million euros in cyberattack","url":"https://vulnpocalypse.dev/advisories/bank-info-security-reports-french-bank-lost-100-million-euros-in-cyberattack/","date":"2026-11-05","summary":"Bank Info Security reports a French bank lost 100 million euros in a cyberattack; details are not confirmed, so wait for official statements.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/cholet-agglomeration-france-cyberattack-disrupted-municipal-telephone/","title":"Cholet Agglomeration (France): cyberattack disrupted municipal telephone service","url":"https://vulnpocalypse.dev/advisories/cholet-agglomeration-france-cyberattack-disrupted-municipal-telephone/","date":"2026-11-01","summary":"The City of Cholet's notice (updated 1 Nov 2026) says the telephone service \"is now operational again\" after \"the disruption caused by the cyberattack it...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/compagnie-des-transports-strasbourgeois-cts-strasbourg-france-api/","title":"Compagnie des transports strasbourgeois (CTS), Strasbourg (France): API abused to steal data of about 230,000 customer accounts","url":"https://vulnpocalypse.dev/advisories/compagnie-des-transports-strasbourgeois-cts-strasbourg-france-api/","date":"2026-10-28","summary":"Per Clubic, CTS announced on 28 Oct that about 230,000 customer accounts (nearly 40% of accounts) were affected.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/alliance-police-nationale-france-union-tells-members-of-unauthorized/","title":"Alliance Police Nationale (France): union tells members of unauthorized access to personal data","url":"https://vulnpocalypse.dev/advisories/alliance-police-nationale-france-union-tells-members-of-unauthorized/","date":"2026-10-24","summary":"Per FuitesInfos, the police union's letter to members refers to \"a computer security incident that led to unauthorized access to some of their personal data\".","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/engie-france-customer-data-stolen-from-a-partner-marketing-tool/","title":"ENGIE France: customer data stolen from a partner marketing tool","url":"https://vulnpocalypse.dev/advisories/engie-france-customer-data-stolen-from-a-partner-marketing-tool/","date":"2026-10-23","summary":"ENGIE notified French customers that data was taken from a tool its sales partners use for prospecting.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/federation-francaise-de-tir-fftir-france-member-accounts-and-licence/","title":"Federation francaise de tir (FFTir), France: member accounts and licence-check function abused, 64,000 ID photos copied","url":"https://vulnpocalypse.dev/advisories/federation-francaise-de-tir-fftir-france-member-accounts-and-licence/","date":"2026-10-22","summary":"FFTir's notice says that in the week of 12 Oct 2026 it suffered \"a new, prepared attack\".","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/i-cad-french-national-pet-identification-registry-cat-owner-data/","title":"I-CAD (French national pet identification registry): cat-owner data extracted via a LOOF access account","url":"https://vulnpocalypse.dev/advisories/i-cad-french-national-pet-identification-registry-cat-owner-data/","date":"2026-10-21","summary":"I-CAD's note (21 Oct 2026) says it was informed on 18 Oct of an incident from \"fraudulent use of an access account assigned to the LOOF\" (the feline...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/ined-french-national-institute-for-demographic-studies-server/","title":"INED (French National Institute for Demographic Studies): server intrusion paralysed IT","url":"https://vulnpocalypse.dev/advisories/ined-french-national-institute-for-demographic-studies-server/","date":"2026-10-20","summary":"Per ActuaLitte, INED detected an intrusion on its servers on Saturday 17 Oct 2026 that \"paralyzes all of its IT infrastructure\".","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/armurerie-centrale-france-online-gun-shop-website-intrusion-exposed/","title":"Armurerie Centrale (France, online gun shop): website intrusion exposed customer data and uploaded documents","url":"https://vulnpocalypse.dev/advisories/armurerie-centrale-france-online-gun-shop-website-intrusion-exposed/","date":"2026-10-20","summary":"Per Cyberattaque.org, which obtained the customer notification, a third party accessed the site without authorization during September 2026.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/france-vacaf-caf-family-holiday-aid-platform-beneficiary-data-leak/","title":"France Vacaf (CAF family holiday-aid platform): beneficiary data leak, platform suspended","url":"https://vulnpocalypse.dev/advisories/france-vacaf-caf-family-holiday-aid-platform-beneficiary-data-leak/","date":"2026-10-10","summary":"The national family allowance fund (Cnaf) said a leak of Vacaf beneficiaries' data was reported on 9 Oct 2026.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/e-votez-french-social-democratic-left-primary-bot-connection-flood/","title":"E-Votez / French social-democratic left primary: bot connection flood slowed online vote","url":"https://vulnpocalypse.dev/advisories/e-votez-french-social-democratic-left-primary-bot-connection-flood/","date":"2026-10-09","summary":"Per Euronews and Clubic, the electronic voting platform (named E-Votez by Clubic) was hit from opening at 8:00 on 9 Oct by \"a massive, fake flood of...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/ap-hp-paris-public-hospitals-data-of-1015-patients-from-meal/","title":"AP-HP (Paris public hospitals): data of 1,015 patients from meal-management software sold on forum","url":"https://vulnpocalypse.dev/advisories/ap-hp-paris-public-hospitals-data-of-1015-patients-from-meal/","date":"2026-10-07","summary":"AP-HP says it was informed on 24 Sep 2026 of the sale of data on a cybercriminal forum and \"confirms the theft of data from 1,015 patients\" from a module...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/hauts-de-france-region-france-via-contractors-atexo-and-docaposte/","title":"Hauts-de-France Region (France) via contractors Atexo and Docaposte: data of about 545,000 aid applicants leaked, possibly bank details","url":"https://vulnpocalypse.dev/advisories/hauts-de-france-region-france-via-contractors-atexo-and-docaposte/","date":"2026-10-05","summary":"Per AFP (via Techniques de l'Ingenieur), regional president Xavier Bertrand said data on nearly 545,000 people leaked after a cyberattack on two contractors.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/double-counter-tellter-sas-france-discord-verification-bot-exposed/","title":"Double Counter / Tellter SAS (France, Discord verification bot): exposed Metabase on retired server led to cloud breach, 12 GB copied","url":"https://vulnpocalypse.dev/advisories/double-counter-tellter-sas-france-discord-verification-bot-exposed/","date":"2026-10-05","summary":"Double Counter's incident report says on 4 Oct 2026 an attacker copied about 12 GB from one of its databases (15:09 to 15:34).","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/anssi-frances-national-cybersecurity-agency-118-accounts-on/","title":"ANSSI (France's national cybersecurity agency): 118 accounts on innovation-lab Metabase compromised","url":"https://vulnpocalypse.dev/advisories/anssi-frances-national-cybersecurity-agency-118-accounts-on/","date":"2026-09-30","summary":"Per IT-Connect and Journal du Geek, ANSSI's 30 Sep 2026 REACTIV situation report disclosed the compromise of 118 Metabase user accounts used by ANSSI's...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/fakturownia-poland-and-its-french-brand-vosfactures-factuali-sas/","title":"Fakturownia (Poland) and its French brand VosFactures (FACTUALI SAS): invoicing platform breached via PDF generation flaw","url":"https://vulnpocalypse.dev/advisories/fakturownia-poland-and-its-french-brand-vosfactures-factuali-sas/","date":"2026-09-29","summary":"TVP World reported on 29 Sep that customer data was breached at the Polish invoicing service Fakturownia.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/maileva-docaposte-france-attempts-to-hijack-customer-accounts-to-send/","title":"Maileva / Docaposte (France): attempts to hijack customer accounts to send letters, platform shut six days","url":"https://vulnpocalypse.dev/advisories/maileva-docaposte-france-attempts-to-hijack-customer-accounts-to-send/","date":"2026-09-24","summary":"Per Solutions Numeriques, Docaposte described \"unauthorized access attempts by a cybercriminal to send illegitimate letters\" via its Maileva online mail...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/belgian-table-tennis-federation-and-its-french-speaking-wing/","title":"Belgian Table Tennis Federation and its French-speaking wing: cyberattack, attacker claims 1.69 GB","url":"https://vulnpocalypse.dev/advisories/belgian-table-tennis-federation-and-its-french-speaking-wing/","date":"2026-09-19","summary":"Per BRF (via Belga), the Belgian table tennis federation and its French-speaking wing were hit by a cyberattack the week before.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/france-dgfip-tax-administration-stolen-credentials-used-to-extract/","title":"France DGFiP (tax administration): stolen credentials used to extract tax data on 678,000 people and businesses","url":"https://vulnpocalypse.dev/advisories/france-dgfip-tax-administration-stolen-credentials-used-to-extract/","date":"2026-08-14","summary":"The Ministry of Economy said an attacker accessed the DGFiP information system in June and July 2026 and consulted or extracted data on 678,000 individuals...","tags":["breach"]}]}