DDoS attack hits France's National Postal Service
Learn More
On Monday, December 23, 2025, France's national postal service La Poste was hit with a large-scale Distributed Denial of Service (DDoS) cyberattack that disrupted postal operations and banking services during one of the busiest periods of the year.
The attack began around 6:00 AM local time and rendered multiple digital platforms temporarily inaccessible, including the main website, mobile applications, the Digiposte document storage platform, and digital identity services.
La Poste confirmed that the DDoS incident overwhelmed its network infrastructure making it impossible for legitimate users to access online services.
The cyberattack's impact extended beyond postal operations to La Banque Postale, the banking subsidiary serving millions of customers across France. Customers experienced significant disruptions to online banking services and mobile application access, preventing them from approving payments or conducting routine banking transactions.
La Poste claims that certain critical services remained operational throughout the incident. Card payments at in-store point-of-sale terminals continued to function normally, ATM cash withdrawals remained available, and online payments could still be processed with SMS-based authentication as a temporary workaround. Physical banking and postal transactions at service counters in post offices remained possible, though many locations operated at reduced capacity.
Letters and holiday greeting cards could still be mailed and delivered, but transactions requiring tracking or access to internal computer systems proved impossible during the outage.
No customer data was compromised during the attack. La Poste explicitly confirmed that the DDoS incident had no impact on customer data security, and there was no evidence of unauthorized access to sensitive information. The number of affected individuals is not disclosed.
Preliminary investigations have raised concerns about potential state-sponsored involvement, but French officials have not made an official attribution.
By Monday evening, more than eight hours after the attack was first reported, the "major network incident" was not resolved. La Poste did not provide a clear timeline for complete service restoration. The company stated that teams were fully mobilized to restore services as quickly as possible. Customers continued reporting difficulties accessing online platforms. Social media channels flooded with complaints from individuals concerned that packages containing Christmas gifts might not arrive in time for the holiday.
