France establishes dedicated cyber response unit following government attacks
France establishes dedicated cyber response unit to strengthen government defense capabilities.
Event / Security
Series of coordinated cyberattacks targeting French government institutions in August-September 2026, affecting the tax authority, education system, and ecological transition ministry, prompting establishment of dedicated cyber response unit.
2026-09-02 to 2026-11-07 · UTC publication dates
Coverage begins 2 Sept, 15:46 UTC
Follow the documented timeline or explore the related reporting.
The Anssi (National Agency for Information Systems Security) intervened at French Ministry of Ecological Transition to investigate suspected user account compromises and implement remediation measures. The agency stated that investigations and remediation efforts could result in temporary interruption of digital services.
The French General Directorate of Public Finances (DGFiP) confirmed on August 14 that two intrusions occurred in late June and late July, resulting in theft of data affecting at least 678,000 individuals and professionals, as well as approximately 200,000 accounts in its property records. Stolen tax information included names, tax reference income, family quotient, and withholding tax rates.
French Prime Minister Sébastien Lecornu ordered the Anssi to establish a new cyber unit to provide faster operational response to cyberattacks targeting France, following the recent breaches of the tax authority and National Education.
An anonymous user claimed responsibility for the cyberattack against the French Ministry of Ecological Transition on a criminal forum, claiming to possess thousands of stolen data records.
The French National Education system was recently targeted by a cyberattack, as part of a pattern of cyber threats against French government institutions.
Multiple websites of France's Ministry of Ecological Transition became inaccessible on September 2, 2026. The sites affected include the public environmental consultations platform and several regional administration websites, which displayed "Maintenance in progress" messages. The National Agency for Information Systems Security (Anssi) confirmed it was conducting investigations into suspected compromise of user accounts and a malicious intrusion, not a routine maintenance issue.
France establishes dedicated cyber response unit to strengthen government defense capabilities.
Coordinated cyberattacks targeted multiple French government agencies, taking websites offline and compromising sensitive data.