Roularta

Roularta, the publisher of magazines such as Knack, Trends, and Libelle, experienced a complex DDoS attack that disrupted its internal network and caused external repercussions. The attack, detected by the CCB, involved intense traffic that overwhelmed servers, reaching up to 3 million calls per second. Despite measures to block the traffic, attackers adapted, shifting their approach and geographic origin. The attack did not result in data breaches or ransomware but delayed the delivery of Knack magazine to some subscribers. The situation normalized the same day, with lessons learned for future cybersecurity preparedness.

Source: https://datanews.levif.be/actualite/securite/cybercrime/la-cyberattaque-lancee-sur-roularta-semble-etre-une-attaque-ddos-complexe-sur-commande/

TPRM report: https://scoringcyber.rankiteo.com/company/roularta-media-group

"id": "rou902061125",
"linkid": "roularta-media-group",
"type": "Cyber Attack",
"date": "6/2025",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Media',
                        'location': 'Belgium',
                        'name': 'Roularta Media Group',
                        'type': 'Publisher'}],
 'attack_vector': 'DDoS-as-a-Service',
 'date_detected': '2023-10-05T08:20:00Z',
 'date_resolved': '2023-10-05T18:00:00Z',
 'description': 'A DDoS-as-a-Service attack disrupted the operations of '
                'Roularta, the publisher of Knack, Trends, Libelle, and Data '
                'News. The attack was highly complex and involved continuous '
                'adaptation by the attackers, targeting the internal network '
                'with intense traffic.',
 'impact': {'operational_impact': 'Delayed delivery of Knack magazine to half '
                                  'of the subscribers',
            'systems_affected': ['Internal network',
                                 'Authentication via MijnMagazines']},
 'lessons_learned': ['Need for more frequent cyberattack simulations',
                     'Importance of keeping contact data of partners '
                     'up-to-date'],
 'motivation': 'Unspecified paid attack',
 'references': [{'source': 'Data News'}],
 'response': {'containment_measures': ['Refining filters on incoming data '
                                       'traffic',
                                       'Geolocation filtering',
                                       'Blocking all traffic except from '
                                       'Belgium and the Netherlands'],
              'third_party_assistance': ['Proximus', 'NTT', 'The Collective']},
 'title': 'DDoS-as-a-Service Attack on Roularta',
 'type': 'DDoS (Distributed Denial of Service)'}