Physical intrusions rise in defense sectors

The share of physical intrusions among all threats recorded on defense-related sites increased from 18% in 2024 to 24% in 2025, according to the 2025 annual report of the Direction du renseignement et de la sécurité de la défense (DRSD). These intrusions primarily target entities in the defense industrial and technological base and defense-related research centers.

Foreign intelligence targets sensitive sectors

The Direction générale de la sécurité intérieure (DGSI) noted that foreign countries may collect sensitive information in the economic, energy, military, and strategic fields across the entire French territory. SMEs in these sectors, particularly those with rare skills or acting as subcontractors, are directly affected.

Human threat remains a top concern

The DRSD report highlights that the human threat remains the most significant among the categories recorded, even though its share decreases year by year. Aerospace, space, quantum technologies, and artificial intelligence are identified as the four priority areas.

AI tools become new vectors for leaks

The DGSI's Flash ingérence document, which has documented similar scenarios since July 2012, reported in its December 2025 edition that an employee of a strategic company translated confidential documents using an AI tool, thereby exposing their content to a third party. The same edition described an attempt at fraud involving a fake CEO created with a voice and face reproduced by AI.

Physical attacks on defense sites increase

Before the Senate in June 2024, Sébastien Lecornu, then Minister of the Armed Forces, cited a 25% increase in physical attacks against defense-related sites. In 80% of cases, the target was a subcontractor, far ahead of major defense firms like Dassault and Thales.

SMEs lack cyber preparedness

According to the 2025 barometer from Cybermalveillance.gouv.fr, conducted with the OpinionWay institute, 49% of French small and medium-sized enterprises are not sufficiently prepared for a cyberattack. Two out of three companies have not implemented any procedures for responding to incidents.

Cyberattacks show significant rise

A year later, according to its 2025 activity report, there were more than 500,000 assistance requests to Cybermalveillance.gouv.fr, an increase of 20% in one year. Phishing reports rose 70%, and professional account compromises increased 45%, an unprecedented volume since the program's creation in 2017.

Preventive measures and resources available

The DGSI regularly documents such situations in its bulletin, and the ANSSI provides a preventive diagnosis platform called MesServicesCyber for small structures. SMEs in sensitive sectors are also advised to contact the service of strategic information and economic security (SISSE) for free assistance with their security diagnosis.

Security protocols and legal requirements

Any visit to premises by a service provider, customer, or external researcher should be covered by a confidentiality agreement. Data breaches should be reported to the CNIL within 72 hours of discovery, as required by regulations.