Two men were sentenced on Friday in Paris to nearly 20,000 euros in damages and eight months' imprisonment, including four months for one of them, for having carried out a cyberattack in 2016, against a backdrop of revenge, against the Regional Health Agency (ARS) Île-de-France.
These facts “are serious in that they affect the security of the data of a State service”, indicates the extract from the judgment of the criminal court where it is specified that “this attack (…) emanates from people who took advantage of their past or present position within the ARS”.
The ARS Île-de-France was the victim between April 11 and May 9, 2016 of "several intrusions into its computer system" which paralyzed the operation of the service for a day and a night and made it impossible to access data. , e-mail and the Internet.
A former claimant wanted revenge
The investigation, opened after a complaint against X from a representative of the ARS, made it possible to trace the login credentials of the head of the Information System Unit of the ARS Centre-Val de Loire, where the position that allowed the intrusion into the agency's systems.
The author of the hack was identified as a former service provider for the ARS, responsible for setting up backup solutions within the agency.
Following a decision not to renew the contract between the agency and the service provider, the author of the hack had the idea of "breaking down" within the agency, he admitted. during the hearing.
The end of this collaboration had led to the liquidation of the computer company.
“I had no more customers.
I had five employees.
100% of my turnover came from the two ARS.
(…) I had built my life around these contracts, ”he justified at the helm.
Prohibition to work in IT
The author of the hack was sentenced to eight months' imprisonment, four of which were closed, while the head of the ARS Center-Val de Loire had an eight-month suspended sentence.
Both have also been banned from exercising a profession related to IT for five years.
The two men were ordered to pay jointly and severally nearly 20,000 euros in damages for non-pecuniary damage, reimbursement of intervention costs and salary increases for the agents mobilized.
