Media giant AFP cyberattack

Following the incident, AFP notified French regulators of a potential data breach, adhering to GDPR requirements that mandate reporting within 72 hours of discovering such incidents. The French National Agency for IT Systems Security (ANSSI) is assisting AFP in addressing the attack, which occurred on September 28, 2024. Specific details regarding the nature of the attack, the perpetrators, and the extent of any data compromise remain unclear. Reports suggest that user credentials for AFP’s file transfer (FTP) servers might have been compromised, prompting the agency to advise partners to change their passwords and secure their systems. As cyberattacks have increasingly targeted French organizations this year, concerns about national cybersecurity are growing, particularly in the context of geopolitical tensions.

Incident Overview

• Date of Attack: September 28, 2024
• Affected Services: IT systems and content delivery for clients
• Investigation: Ongoing collaboration with ANSSI

Regulatory Response

• Notification: AFP has informed the Commission Nationale Informatique & Libertés (CNIL) of the potential breach.
• GDPR Compliance: The agency is following regulations that require timely reporting of data breaches.

Background Context

The attack on AFP is part of a broader trend of cyber incidents affecting French institutions, with several high-profile breaches reported earlier in the year. The French government has attributed many of these attacks to foreign actors, particularly amid rising tensions linked to geopolitical conflicts.