Libercourt Confirms Personal Data Exfiltration in Ransomware Attack

Summary

Libercourt confirmed personal data was exfiltrated in a ransomware attack, while saying municipal services were unaffected. The city is investigating the data’s nature and volume; a criminals’ claim of 817 GB stolen remains unconfirmed.

Key points

• The municipality said the ransomware attack likely occurred in late August and was officially disclosed on September 15.
• The city confirmed personal data was exfiltrated, but investigations into the type and volume of data are ongoing.
• Libercourt said municipal services and public reception continued without disruption.
• The city said it deployed corrective measures to strengthen access security for municipal servers.
• Cybercriminals reportedly claimed they stole 817 GB and threatened publication; claims that the data included payslips and identity cards were not confirmed by the mayor.
• The municipality advised residents to watch for phishing attempts and change passwords for municipal service accounts; it reported the incident to France’s CNIL and ANSSI and filed a complaint.