Drooid Logo
Back to story perspectives

Full Breakdown

Pro-Russian Hackers Disrupt French Postal Service Amid Christmas Rush

12/24/2025, 8:25:42 PM

Cyberattack Overview

A significant cyberattack attributed to the pro-Russian hacking group Noname057(16) has disrupted France's national postal service, La Poste, during the critical Christmas delivery period. The attack, which began on December 22, 2025, involved a distributed denial of service (DDoS) that incapacitated La Poste's central computer systems, affecting package tracking and online banking services. The Paris prosecutor's office confirmed the incident and stated that the French intelligence agency, DGSI, has taken over the investigation.

Impact on La Poste and Services

La Poste, which employs over 200,000 individuals and delivered approximately 2.6 billion packages in the previous year, reported that while it continued to deliver parcels, the situation remained unstable as of December 24. The cyberattack occurred during one of the busiest times of the year, causing significant disruptions to both consumer banking and mail tracking services.

Background on Noname057(16)

Noname057(16) emerged in 2022, coinciding with Russia's full-scale invasion of Ukraine. The group has been linked to various cyberattacks across Europe, targeting not only Ukrainian media but also government and corporate websites in countries such as Poland, Sweden, and Germany. Earlier this year, Noname057(16) was the focus of Operation Eastwood, a coordinated international police effort that dismantled over 100 servers and resulted in multiple arrests. Despite these efforts, the group quickly resumed operations.

Official Statements & Responses

French Economy Minister Roland Lescure emphasized the urgency of ensuring timely deliveries during the holiday season, stating that "the priority of all priorities" was to manage the situation effectively. Meanwhile, Interior Minister Laurent Nunez hinted at potential Russian involvement in the attack, noting that "foreign interference very often comes from the same country," although no official attribution has been made.

Criticism & Opposition

Critics of the French government's cybersecurity measures have raised concerns about the increasing frequency of such attacks, suggesting that the state may be ill-prepared to handle the evolving threat landscape posed by groups like Noname057(16). The incident has sparked discussions about the need for enhanced cybersecurity protocols and international cooperation to counteract hybrid warfare tactics.

Conflicting Reports & Gaps

While the Paris prosecutor's office has confirmed the cyberattack and its impact on La Poste, there are no detailed reports on the extent of the data compromised or the specific motivations behind the attack. Additionally, the DGSI's ongoing investigation may reveal further insights into the operational capabilities of Noname057(16) and its connections to broader geopolitical tensions.

Verbatim Quotes

  • “the situation remains unstable” — La Poste
  • “Early Tuesday, when questioned about the cyberattack, French Economy Minister Roland Lescure told the BFMTV/RMC news outlet that "the priority of all priorities" was to make sure that parcels were delivered in time for Christmas.” — Roland Lescure, French Economy Minister
  • “foreign interference very often comes from same country,” — Laurent Nunez, French Interior Minister

This cyberattack highlights the ongoing challenges faced by European nations in safeguarding their critical infrastructure against sophisticated cyber threats, particularly those linked to geopolitical conflicts.