Civil Protection revealed on Friday that it had been the target of a cyberattack dating back to March, confirming information published by the specialized site Frenchbreaches. The breach concerns the e-Protec platform, used notably by the association’s volunteers. A spokesperson for the National Federation of Civil Protection (FNPC) stated in a press release that civil status data, phone numbers, and profile photos are among the stolen items, including those of minors.
According to Frenchbreaches, more than 525,000 profiles were exfiltrated from the database. A figure the association disputes for the moment, citing several duplicates in the file involved in the hacking.
The scale of the attack remains uncertain
The Civil Protection states that it discovered this leak on Monday, August 17, and assures that no hacked data concerns people who were assisted by the association, but only volunteers, former volunteers, or third parties. It also notes that it does not know the current extent of the attack nor the exact number of people affected.
For now, nothing indicates whether the information has been viewed, extracted, sold, or publicly disseminated.
The association announced that it has filed a complaint with the Cybercrime division of the Paris prosecutor’s office and says that this attack is part of a broader wave targeting organizations such as sports federations.
