France — Cyber Threat Profile
France has launched its 2026–2030 National Cybersecurity Strategy, positioning itself as Europe's "Cyber Powerhouse." Under the guidance of ANSSI, the strategy focuses on four pillars: talent development, deterrence, technological sovereignty, and national resilience. A major 2026 initiative is the EU Cyber Reserve, which allows for the rapid deployment of incident response services across member states. France is also championing "bridge strategies" to link cybersecurity with AI and quantum research. The government has mandated NIS2 compliance for all essential entities, introducing strict penalties and regular audits to ensure the integrity of the nation's digital infrastructure and the broader European market.- National CERT/CSIRT: CERT-FR
- Data protection authority: Commission nationale de l'informatique et des libertés (CNIL) (source: CNIL)
- World Cybercrime Index 2024 (origin significance): 1.17 / 100, #29 worldwide
- Secure Internet servers per 1M people (2024): 57,274.6 (source: World Bank)
- Internet users (2024): 88.7% of population (source: World Bank)
Latest France coverage
- Steam hardware buyers' delivery data stolen in Europe 2026-08-12 · Cyber Incidents
Threat actors targeting France
- APT29 APT
- NoName057(16) Hacktivist
- Ruza Flood APT
- Sandworm Team APT
- ZIRCONIUM APT
- Qilin Ransomware · 98 incident(s)
- LockBit Ransomware · 37 incident(s)
- The Gentlemen Ransomware · 25 incident(s)
- 8Base Ransomware · 24 incident(s)
- RansomHub Ransomware · 18 incident(s)
- Akira Ransomware · 12 incident(s)
- Hunters International Ransomware · 12 incident(s)
- INC Ransom Ransomware · 12 incident(s)
- NightSpire Ransomware · 12 incident(s)
- DragonForce Ransomware · 11 incident(s)
- Cl0p Ransomware · 9 incident(s)
- Coinbase Cartel Ransomware · 8 incident(s)
- Lynx Ransomware Ransomware · 8 incident(s)
- Stormous Hacktivist · 8 incident(s)
- Fog Ransomware Ransomware · 7 incident(s)
- Cactus Ransomware · 6 incident(s)
- ShinyHunters Ransomware · 6 incident(s)
- Krybit Ransomware · 5 incident(s)
- LAPSUS$ Hacktivist · 5 incident(s)
- Anubis Ransomware · 4 incident(s)
- FunkSec Ransomware · 4 incident(s)
- Lamashtu Ransomware · 4 incident(s)
- ALP-001 Ransomware · 3 incident(s)
- MedusaLocker Ransomware · 3 incident(s)
- APT73 Ransomware · 2 incident(s)
- Black Basta Ransomware · 2 incident(s)
- BravoX Ransomware · 2 incident(s)
- Gunra Ransomware · 2 incident(s)
- Kairos Ransomware · 2 incident(s)
- KillSec Ransomware · 2 incident(s)
- Medusa Ransomware Ransomware · 2 incident(s)
- Nova Ransomware · 2 incident(s)
- RansomHouse Ransomware · 2 incident(s)
- Sarcoma Ransomware · 2 incident(s)
- AiLock Ransomware · 1 incident(s)
Most targeted sectors
- Business & Professional Services 59 incident(s)
- Technology 45 incident(s)
- Manufacturing 37 incident(s)
- Agriculture & Food 23 incident(s)
- Government & Public Sector 23 incident(s)
- Transportation & Logistics 21 incident(s)
- Healthcare 17 incident(s)
- Education & Research 14 incident(s)
- Hospitality & Tourism 14 incident(s)
- Retail & Consumer 11 incident(s)
- Construction 9 incident(s)
- Energy & Utilities 8 incident(s)
Recent claimed incidents
- Jone Précision 2026-08-16 · Manufacturing
- Bija Industrie 2026-08-16 · Manufacturing
- Groupe Actua 2026-08-16 · Professional Services
- Dupouy et Associes 2026-08-16 · Professional Services
- NUVITIA.COM 2026-08-12 · Technology
- SON-VIDEO 2026-08-12 · Retail & E-Commerce
- www.ernat-bureau-etudes.fr 2026-08-07 · Professional Services
- Actini Group (ACTINI SAS) 2026-08-07 · Technology
- REFLET 2000 2026-08-07 · Other
- bouygues-es.fr 2026-08-07 · Energy & Utilities
- MEDICOS 2026-08-07 · Healthcare
- ALIZE (alize-sud.fr) 2026-08-06 · Professional Services
- Stade Francais 2026-08-05 · Hospitality
- setic-pourtier.com 2026-08-03 · Other
- Mairie de Rinxent (Municipality of Rinxent) 2026-08-02 · Government & Defense