France Cyber Watch
Reports since 1 Jan 2026. Not a live feed.
Threat level, France
Background readingHacktivismIncident response
No public level found
No published national cyber threat level found for France, checked 7 Nov 2026. France publishes no national cyber threat level; ANSSI's CERT-FR issues alerts and advisories, and the Vigipirate level covers terrorism.
Source: CERT-FR
From official agencies
| Date | Agency | Advisory or alert |
|---|
Agency headlines, unedited.
Compare countries
| Country | Threat level | Confirmed | Claimed only | Via a vendor | Latest report |
|---|---|---|---|---|---|
 Malaysia | Medium | 19 | 35 | 7 | 7 Nov 2026 |
 Singapore | None published | 12 | 24 | 3 | 7 Nov 2026 |
 Indonesia | None published | 6 | 32 | 0 | 5 Nov 2026 |
 Thailand | None published | 9 | 33 | 0 | 3 Nov 2026 |
 Philippines | None published | 9 | 35 | 4 | 7 Nov 2026 |
 Vietnam | None published | 5 | 34 | 0 | 5 Nov 2026 |
 Israel | None published | 4 | 2 | 0 | 7 Nov 2026 |
 Iran | None published | 4 | 0 | 0 | 13 Jun 2026 |
 United Arab Emirates | None published | 4 | 4 | 1 | 7 Oct 2026 |
 Saudi Arabia | None published | 2 | 5 | 0 | 12 Oct 2026 |
 Egypt | None published | 1 | 4 | 1 | 29 Oct 2026 |
 South Africa | None published | 8 | 0 | 1 | 26 Oct 2026 |
 Nigeria | None published | 2 | 3 | 0 | 8 Aug 2026 |
 Kenya | None published | 1 | 6 | 0 | 25 Jul 2026 |
 India | None published | 9 | 2 | 1 | 28 Oct 2026 |
 Pakistan | None published | 3 | 3 | 0 | 22 Jul 2026 |
 Bangladesh | None published | 1 | 5 | 0 | 23 Oct 2026 |
 Sri Lanka | None published | 4 | 3 | 1 | 1 Jul 2026 |
 Cambodia | None published | 0 | 3 | 0 | 10 Jun 2026 |
 Myanmar | None published | 1 | 5 | 0 | 25 Oct 2026 |
 Brunei | None published | 0 | 0 | 0 | |
 Poland | BRAVO-CRP | 5 | 0 | 4 | 1 Oct 2026 |
 Ukraine | None published | 7 | 0 | 1 | 4 Nov 2026 |
 Russia | None published | 7 | 0 | 1 | 1 Nov 2026 |
 Czechia | None published | 3 | 0 | 1 | 22 Oct 2026 |
 Romania | None published | 2 | 0 | 0 | 14 Jul 2026 |
 Estonia | None published | 5 | 0 | 3 | 4 Nov 2026 |
 Turkey | None published | 3 | 0 | 1 | 16 Sep 2026 |
 United Kingdom | None published | 5 | 1 | 3 | 2 Nov 2026 |
 Germany | None published | 4 | 0 | 1 | 2 Nov 2026 |
| France | None published | 7 | 0 | 2 | 4 Nov 2026 |
 Netherlands | None published | 5 | 1 | 1 | 2 Nov 2026 |
 Italy | None published | 5 | 0 | 0 | 7 Nov 2026 |
 Spain | None published | 3 | 0 | 0 | 5 Feb 2026 |
 Ireland | None published | 3 | 4 | 0 | 2 Nov 2026 |
 Sweden | None published | 5 | 3 | 2 | 2 Nov 2026 |
 United States | None published | 6 | 0 | 2 | 28 Aug 2026 |
 Canada | None published | 5 | 0 | 1 | 21 Aug 2026 |
 Mexico | None published | 2 | 4 | 1 | 21 Aug 2026 |
 Brazil | None published | 2 | 2 | 0 | 2 Nov 2026 |
 Argentina | None published | 1 | 2 | 0 | 4 Aug 2026 |
 Chile | None published | 1 | 2 | 0 | 2 Nov 2026 |
 Colombia | None published | 1 | 2 | 0 | 4 Nov 2026 |
 Japan | None published | 9 | 0 | 5 | 4 Nov 2026 |
 South Korea | Caution | 6 | 0 | 2 | 29 Oct 2026 |
 China | None published | 0 | 3 | 0 | 7 Aug 2026 |
 Taiwan | None published | 9 | 0 | 2 | 3 Nov 2026 |
 Hong Kong | None published | 3 | 0 | 3 | 30 Oct 2026 |
 Australia | None published | 5 | 0 | 1 | 2 Nov 2026 |
 New Zealand | None published | 7 | 2 | 1 | 3 Sep 2026 |
2026 counts. Click a row to open a country.
Official numbers
| Measure | Value | Period | Source |
|---|---|---|---|
| ANTS portal accounts affected | 11.7 million | April 2026 breach | BleepingComputer |
| Bank accounts exposed in FICOBA breach | About 1.2 million | January 2026 intrusion | BleepingComputer |
| Taxpayers in DGFiP breach | 678,000 | August 2026 breach | BleepingComputer |
Who is targeting it
Laws and rules this year
- 11 Sep 2026EU Cyber Resilience Act reporting obligations apply. Manufacturers of products with digital elements must report actively exploited vulnerabilities and severe incidents from this date; the main obligations follow on 11 December 2027. Source
Full stories
- Crédit Mutuel Arkéa loses about 100 million euros to fraudulent transfers France · 4 Nov 2026
- European supermarket fridges hacked in a single night Estonia, United Kingdom, Germany +5 · 3 Nov 2026
Official statements
Incidents
7 of 7 incidents
| What happened | Sources | |||||
|---|---|---|---|---|---|---|
 ✅ ConfirmedCrédit Mutuel ArkéaFull story | 4 Nov 2026 | Finance | Intrusion | None | Confirmed. Arkéa disclosed a sophisticated outside attack that sent about 100 million euros from its own account to other banks and said customer assets were unaffected. | Silicon Republic✓ 7 Nov |
 ✅ ConfirmedÉtablissement français du sang (EFS)Via a vendorFull story | 2 Nov 2026 | Health | Not disclosed | None | Confirmed. EFS said attackers raised temperature and defrost thresholds at three plasma cold-storage sites through its refrigeration supplier, and no blood products were lost. | BleepingComputer · NY1 (AP)✓ 7 Nov |
| ✅ ConfirmedIntermarché, Coopérative U and other supermarket chainsVia a vendor | 11 Oct 2026 | Retail | Not disclosed | None | Confirmed. Intermarché said a cyberattack on a service provider put display units out of service and Coopérative U's president confirmed the attack; the Paris prosecutor opened an investigation. | BleepingComputer · CERT-FR✓ 7 Nov |
 ✅ ConfirmedDGFiP tax administration | 17 Aug 2026 | Government | Data leak | Confirmed. The Ministry of the Economy said an attacker accessed DGFiP systems and tax data on 678,000 people and professionals, and notified CNIL and ANSSI. Claimed. ZeroBytes listed a cadastral database for sale on PwnForums, claiming data on over 2 million people. | BleepingComputer✓ 7 Nov | |
 ✅ ConfirmedTchap government messenger (DINUM) | 9 Jun 2026 | Government | Data leak | None | Confirmed. DINUM said a compromised account was used to take data from public Tchap rooms, affecting 73,467 government agents. | BleepingComputer✓ 7 Nov |
 ✅ ConfirmedFrance Titres (ANTS) | 15 Apr 2026 | Government | Data leak | Confirmed. ANTS detected a security incident on its portal and later confirmed 11.7 million accounts were affected. Claimed. An actor using the name breach3d offered up to 19 million records for sale on hacker forums. | BleepingComputer✓ 7 Nov | |
| ✅ ConfirmedFICOBA bank account registry (DGFiP) | 20 Feb 2026 | Government | Data leak | None | Confirmed. The Ministry of Finance said an attacker used a civil servant's stolen credentials to reach part of FICOBA, exposing details of about 1.2 million bank accounts. | BleepingComputer✓ 7 Nov |
FAQ
Does France have a national cyber threat level?
No published national cyber threat level was found for France (checked 7 Nov 2026). France publishes no national cyber threat level; ANSSI's CERT-FR issues alerts and advisories, and the Vigipirate level covers terrorism.
Which organisations in France confirmed cyber incidents recently?
7 incidents confirmed since January 2026: Crédit Mutuel Arkéa, Établissement français du sang (EFS), Intermarché, Coopérative U and other supermarket chains, DGFiP tax administration, Tchap government messenger (DINUM), France Titres (ANTS) and FICOBA bank account registry (DGFiP).
What counts as a confirmed incident?
The organisation, a regulator, the police or a minister has said something happened, as reported by a named outlet. Everything else is listed as claimed.
Why list leak-site claims at all?
Ransomware and extortion crews post victims on leak sites before anyone confirms. The list shows what attackers say. Treat it as a lead and check with the organisation.
Is the map a live attack feed?
No. It counts incidents and claims reported in 2026. Live attack maps from security vendors show scanning traffic hitting their sensors, which does not mean a place was attacked.
How often is it updated?
By hand when a national level changes or a notable incident is reported. The date is shown in the header.
Sources: official statements and regional press, including Bernama, The Star, Malay Mail, CNN Indonesia and Newsbytes.PH; leak-site claims from public ransomware trackers. Each entry links its source.