ThreatCluster
About Blog Help Contact
Login
  • Feed
  • Dashboard
  • Saved
THREAT HUNTING
  • Domains
  • IP Addresses
  • File Hashes
  • CVEs
THREAT INTELLIGENCE
  • APT Groups
  • Ransomware Groups
  • Malware Families
  • Attack Types
  • MITRE ATT&CK
  • Security Standards
  • Vulnerability Types
BUSINESS INTELLIGENCE
  • Companies
  • Industry Sectors
  • Security Vendors
  • Government Agencies
  • Countries
  • Platforms
Home / Feed / Cluster #1401

France's warship builder Naval Group investigates 1TB data breach

Threat Score:
62
2 articles
84.0% similarity
12 days ago
JSON CSV Text STIX IoCs
Splunk Elastic Sentinel Sigma YARA All Queries

Article Timeline

2 articles
Click to navigate
Jul 28
Jul 28
Oldest
Latest
France's warship builder Naval Group investigates 1TB data breach

Key Insights

1
Naval Group is investigating a significant data breach involving 1TB of allegedly stolen internal data, linked to a hacker named 'Neferpitou'.
2
The leaked data includes sensitive information related to French naval operations, raising concerns for national and international security.
3
Naval Group claims there are no signs of an IT systems breach, and operations remain unaffected, but they are taking the incident seriously.
4
Immediate actions include filing a complaint to protect client data and engaging external cybersecurity experts for investigation.

Threat Overview

Naval Group, a French defense contractor, is probing a cyberattack that has reportedly resulted in the leak of 1TB of sensitive data, including naval secrets, posted by a hacker known as 'Neferpitou' [1][2]. While the company asserts that there is no evidence of a breach in their IT systems and that operations are intact, the implications for national and international security are significant [1][2]. Organizations in the defense sector should enhance monitoring for unusual data access and consider conducting thorough security audits. Additionally, they should review incident response plans to address potential reputational damage and data protection measures [1].

Tactics, Techniques & Procedures (TTPs)

T1560
Data Obfuscation - Data exfiltration methods used to conceal sensitive information [1, 2]
T1071.001
Application Layer Protocol: Web Protocols - Use of web protocols for data transfer [1, 2]
T1583
Acquire Infrastructure - The hacker's use of a hacking forum to sell stolen data [1, 2]
T1499
Endpoint Denial of Service - Potential disruption tactics aimed at Naval Group's reputation [1]

Timeline of Events

2025-07-28
Naval Group confirms investigation into data breach and leak of 1TB of data [1, 2]
Ongoing
Investigation and monitoring of the situation with external cybersecurity experts [1]
Powered by ThreatCluster AI
Generated 12 days ago
AI analysis may contain inaccuracies

Related Articles

2 articles
1
France's warship builder Naval Group investigates 1TB data breach

France's warship builder Naval Group investigates 1TB data breach

BleepingComputer • 12 days ago

France's warship builder Naval Group investigates 1TB data breach Bill Toulas July 28, 2025 11:31 AM 0 France's state-owned defense firm Naval Group is investigating a cyberattack after 1TB of allegedly stolen data was leaked on a hacking forum. The company characterized this as a "destabilization attempt" and a "reputational attack," to which it has responded by filing a complaint to protect its client's data. Meanwhile, Naval Group is investigating with the assistance of external experts to de

Score
54
96.0% similarity
Read more
2
French submarine secrets surface after cyber attack

French submarine secrets surface after cyber attack

Graham Cluley • 12 days ago

European defence giant Naval Group has confirmed that it is investigating an alleged cyber attack which has seen what purports to be sensitive internal data published on the internet by hackers. Naval Group builds and maintains an array of ships and submarines for the French navy, including aircraft carriers and nuclear submarines. It counts several foreign navies amongst its customers including India and Brazil. As such, a security breach against the defence contractor should be considered a co

Score
50
96.0% similarity
Read more

Save to Folder

Choose a folder to save this cluster:

Cluster Intelligence

Key entities and indicators for this cluster

INDUSTRIES
Communications
Nuclear
COUNTRIES
France
India
Ukraine
Australia
COMPANIES
Microsoft
ServiceNow
VULNERABILITIES
Remote Code Execution
XSS
ATTACK TYPES
Ransomware
Remote Code Execution
APT GROUPS
APT17
CVES
CVE-2025-53770
AGENCIES
CERT
PLATFORMS
SharePoint
CLUSTER INFORMATION
Cluster #1401
Created 12 days ago
Semantic Algorithm

We use cookies

We use cookies and similar technologies to enhance your experience, analyse site usage, and assist in our marketing efforts.

Cookie Settings

Essential Cookies

Required for the website to function. Cannot be disabled.

  • Session management and authentication
  • Security and fraud prevention
  • Cookie consent preferences

Analytics Cookies

Help us understand how visitors interact with our website.

  • Plausible Analytics - Privacy-focused usage statistics
  • PostHog - Product analytics and feature tracking
  • Page views and user journey analysis

Performance Cookies

Help us monitor and improve website performance.

  • Page load time monitoring
  • Error tracking and debugging
  • Performance optimisation

Marketing Cookies

Used to track visitors across websites for marketing purposes.

  • Conversion tracking
  • Remarketing campaigns
  • Social media integration