Two men were sentenced Friday, November 25 in Paris to nearly 20,000 euros in damages and eight months' imprisonment, including four firm for one of them, for having carried out a cyberattack in 2016, against a backdrop of revenge. , against the Regional Health Agency (ARS) of Île-de-France.
Both had professional ties to the ARS.
"Break down" to sate personal revenge
The ARS Île-de-France was the victim between April 11 and May 9, 2016 of "
several intrusions into its computer system
" which paralyzed the operation of the service for a day and a night, making it impossible to access the data. , e-mail and the Internet.
The investigation, opened after a complaint against X from a representative of the ARS, made it possible to trace the login credentials of Bertrand Lallemand, then head of the Information System Unit of the ARS Centre-Val de Loire , where the station that allowed the intrusion into the agency's systems was installed.
Read alsoThe site of the European Parliament targeted by a cyberattack after a vote on Russia
The author of the hack was identified as Ali Tombari, manager of the company Ceps informatics ingenierie, a former service provider for the ARS, responsible for setting up backup solutions within the agency.
Following a decision not to renew the contract between the agency and the service provider, the author of the hack had the idea of "
breaking down
" within the agency, he admitted. during the hearing.
The end of this collaboration had led to the liquidation of the computer company.
“
I had no more customers.
I had five employees.
100% of my turnover came from the two ARS.
(…) I had built my life around these contracts
, ”he justified at the helm.
State service data security
"
The facts for which Messrs. Tombari and Lallemand have been found guilty are serious in that they affect the security of the data of a State service
", indicates the extract from the judgment of the criminal court consulted by AFP where it is specified that "
this attack (...) emanates from people who took advantage of their past or present position within the ARS
".
Ali Tombai was sentenced to eight months' imprisonment, four of which were suspended, while Bertrand Lallemand was given an eight-month suspended sentence.
Both have also been banned from exercising a profession related to IT for five years.
The two men were also ordered to pay jointly and severally nearly 20,000 euros in damages for non-pecuniary damage, reimbursement of intervention costs and salary increases for the agents mobilized.
