Hackers Take Down La Poste and Banque Postale Websites in Repeat Cyberattack

Hackers Take Down La Poste and Banque Postale Websites in Repeat Cyberattack

01 January, 20262 sources compared
Technology and Science

Key Points from 2 News Sources

  1. 1

    La Poste and Banque Postale websites were inaccessible during Thursday morning cyberattack.

  2. 2

    Attack followed a recent Christmas-period incident that disrupted parcel tracking.

  3. 3

    New incident began around 8 a.m., affecting numerous La Poste online services.

Full Analysis Summary

Postal bank cyberattack

La Poste and La Banque Postale suffered a cyberattack early Thursday morning that began at about 3:30 a.m.

By 8 a.m., access to many online services, including parcel tracking and the Digiposte secure vault, was very difficult.

La Banque Postale users could not confirm payments via the app but could authenticate via SMS.

Card payments at terminals and ATM withdrawals remained unaffected.

La Poste said technical teams were working to restore services quickly and stated that no data had been leaked.

Coverage Differences

Tone / Operational detail emphasis

Le Monde.fr (Western Mainstream) focuses on operational impacts and company assurances — listing precise services affected, authentication workarounds, and a company statement that no data was leaked. RFI (Western Mainstream) does not provide the same operational detail in its snippet but frames the event in the broader context of a hacker group's activity and does not quote a company assurance about data leaks in the provided excerpt. This indicates Le Monde prioritizes immediate service and customer-impact details while RFI emphasizes attribution and context.

Parcel tracking cyberattacks

This incident follows an earlier, larger denial-of-service attack that began on Dec. 22 and severely disrupted parcel tracking for several days, although deliveries continued normally.

That earlier attack was claimed by the pro‑Kremlin group NoName057(16) and prompted a complaint and an investigation by the Paris public prosecutor, France’s DGSI, and the national cyber unit, underscoring ongoing official concern and investigative response.

Coverage Differences

Attribution and historical context

Le Monde.fr (Western Mainstream) provides explicit historical context tying the new outage to a Dec. 22 denial-of-service attack that was claimed by NoName057(16) and notes the legal and security follow-up (complaint and investigation by Paris public prosecutor, DGSI and national cyber unit). RFI (Western Mainstream) in the provided excerpt does not mention that specific Dec. 22 incident or the investigation — instead it focuses on describing the hacker group's origins and targets in a broader geographic context. Thus Le Monde gives direct local investigative detail, while RFI emphasizes the group's background and activity pattern.

Pro-Russian hacktivist network

Outside France, the group linked to earlier claims, active since 2022, has been reported to target Ukrainian media, government, and corporate websites in several European countries, and experts describe it as a loose network of pro-Russian hacktivists supporting information warfare.

That wider pattern suggests the group's activity extends beyond simple service disruption to politically motivated operations across borders, according to reporting.

Coverage Differences

Scope and motive framing

RFI (Western Mainstream) frames the group as part of a broader, politically motivated campaign since 2022 — noting targets in multiple countries and experts’ assessment that it supports pro‑Russian information warfare and operates as a loose hacktivist network. Le Monde.fr (Western Mainstream) mentions the claim by NoName057(16) regarding the Dec. 22 attack and the domestic investigation, but the provided Le Monde excerpt emphasizes France-specific operational impacts and investigative steps rather than the group’s regional motives. The two sources therefore complement each other: RFI gives motive and geographic scope, while Le Monde supplies specific local incident and response details.

Conflicting reports summary

Many details remain unclear.

At the time of reporting, La Poste's public comments in the RFI excerpt show the company did not immediately respond to AFP's queries, while Le Monde reports the firm's technical teams were restoring services and asserted no data breach.

The sources therefore differ in which company statements they include: investigators' involvement is reported by Le Monde, while RFI emphasizes the group's broader activity and origins.

Given the limited snippets available, attribution, the final impact on customers, and whether the same actors conducted both incidents cannot be confirmed from these two pieces alone.

Coverage Differences

Reporting completeness / company response

Le Monde.fr (Western Mainstream) quotes a company assurance that 'no data has been leaked' and lists the services affected and mitigations, while RFI (Western Mainstream) records that 'When AFP contacted La Poste about the matter, the company did not immediately comment.' This is a direct reporting difference about whether La Poste provided an on-record statement in the coverage.

Availability of cross-border motive vs. domestic investigative detail

RFI highlights the group's cross-border operations and alleged pro‑Russian information warfare motive; Le Monde provides domestic investigative follow-up (complaint and DGSI/national cyber unit involvement). Each source therefore emphasizes different layers: motive and geo-scope (RFI) versus legal/investigative response and operational impact inside France (Le Monde).

All 2 Sources Compared

Le Monde.fr

La Poste's website paralyzed again after a new cyberattack

Read Original

RFI

Another cyber attack takes down France's online postal services

Read Original