Ransomware Attack Disrupts Drancy Municipal Services; Residents’ Data May Be Exposed
Summary
Drancy says a ransomware attack detected July 3 disrupted municipal systems and services. The city refused to pay, is rebuilding systems with ANSSI, and says personal-data leaks are possible but their extent is unknown.
Key points
- Municipal IT staff discovered on July 3 that they could not access some systems; restoring access required a bitcoin payment.
- The city refused to pay the ransom and filed a complaint with specialized prosecutors.
- Systems were disconnected to limit the malware’s spread, disrupting municipal services and preventing some resident requests from being recorded.
- The mayor said personal-data leaks are possible, but their extent is unknown; residents were advised to change passwords and watch for phishing.
- Drancy is working with France’s ANSSI to rebuild systems from clean backups; a return to normal is expected in the coming weeks.
- The mayor said the attack affected more than Drancy but gave no further details.
Article Details
- Victim Organization
- Ville de Drancy
- Incident Type
- Ransomware attack
- Incident Date
- 2026-07-03
- Disclosure Date
- 2026-07-21
- Data Types Exposed
- Residents' personal data (possible exposure; extent unknown)
- Operational Impact
- Municipal systems were disconnected to limit malware propagation, disrupting and slowing public services; some resident requests could not be recorded, and municipal services were harder to reach by phone. Email exchanges were reportedly unaffected. Recovery was expected over the following weeks.
- Ransom Or Extortion
- The attackers demanded payment in bitcoin to restore access. The city refused to pay; the amount was not disclosed.
- Claim Status
- confirmed