Paris water agency targeted in cyber-attack

The organisation that manages wastewater for nine million people in and around Paris has been hit by a cyber-attack.

Service Public de L’Assainissement Francilien (SIAAP) manages nearly 275 miles of pipes throughout four French departments.

The organisation said that it filed a complaint with the judicial police and National Commission on Informatics and Liberty (CNIL) following the discovery of a cyber-attack.

IT teams have since been working to secure industrial systems and close off all external connections in order to prevent the attack from spreading.

Officials said they have prioritised measures that allow them to “maintain the continuity of the public sanitation service for Ile-de-France residents.”

“The SIAAP crisis unit remains mobilised to manage the aftermath of this attack and support the continuity of the work of all of its agents from this week in a working environment largely degraded by the current situation.”

“This mobilisation will continue until a return to normal can be ensured.”

The organisation has set up local systems to answer any questions from the public and said it is in constant communication with various government agencies about the situation.

No hacking group has taken credit for the attack, but water authorities have been a prime target for ransomware gangs eager to target critical services in possession of sensitive customer information.

In May, an Italian company that provides drinking water to nearly half a million people was the target of a ransomware demand, while the water utility of Porto, Portugal’s second-largest city, was similarly affected in February.

South Staffordshire Water, which supplies water for more than 1.7 million people in England, was also targeted by a ransomware attack in August 2022.