Hacker group claims attack on La Poste Mobile

On Wednesday, October 21, the pro-Russian hacker group NoName057(16) published a message on the Telegram channel, claiming to have conducted attacks against La Poste Mobile as part of its #OpFrance campaign. The claims were detected by FrenchBreaches, a website specializing in tracking data breaches in France.

Services targeted in the attack

According to the group, they targeted four services: the main site, the customer area where subscribers manage their plans, a subdomain related to the operator's services, and the SIM card activation platform. When these pages no longer respond, it becomes impossible to access accounts, change subscriptions, or activate new SIM cards.

DDoS attacks and supporting evidence

A member of the editorial team encountered difficulties accessing these services. The group claims to have conducted denial of service (DDoS) attacks, which involve flooding servers with a massive volume of requests to make them temporarily inaccessible. To support their claims, the group published four Check-Host reports, an online service that checks whether a site responds from different points around the world.

No official confirmation from the company

Neither La Poste Mobile nor its parent company Bouygues Telecom issued a statement confirming the attack during the initial checks on Wednesday morning. An external service for tracking outages no longer recorded a significant general disruption, suggesting an intermittent attack or one that was quickly contained. No data breach has been proven at this stage, and no verified public evidence shows that customer personal data has been compromised.

Claims of customer data leak unconfirmed

The collective further claimed during the day to have obtained the data of 25,000 customers (names, addresses, phone numbers, emails), about 1% of the 2.4 million subscribers the operator had at the time of its acquisition. The group accompanied this claim with screenshots presented as coming from customer areas, one of which shows a "Banking Coordinates" section with a partially masked IBAN. Neither the figure nor the leak itself have been independently confirmed.

Attack does not affect the broader La Poste group

La Poste Mobile has belonged to Bouygues Telecom since November 2024, even though the brand is still distributed in post offices. The claim therefore targets the web services of La Poste Mobile. It does not allow concluding an attack against the La Poste group or against La Banque Postale.

Advice for affected users

If the customer area or the activation page does not respond, users are advised to try again after a few minutes and avoid chaining attempts to activate a SIM card. An attack against an operator's website does not necessarily cut off calls, SMS, or data, so users should check whether the problem affects only the site. Finally, users are advised to ignore any unofficial link that promises emergency access to their account, as scammers often take advantage of such outages to send fake assistance messages.