Agents of the operational center of ANSSI check datas on computers in Paris. GETTY IMAGES

French authorities disclosed over 140 cyberattacks during the recent Paris Olympics, but none disrupted the competitions. Anssi, the national cybersecurity agency, had been on high alert throughout the Games, anticipating threats to key systems, including transportation and ticketing.

From 26 July to 11 August, Anssi recorded 119 reports of low-impact "security events" and 22 incidents where a "malicious actor" successfully targeted a victim's information system. The cyberattacks primarily targeted government entities, as well as infrastructure related to sports, transport, and telecommunications.

Anssi reported that about a third of the incidents involved downtime, with half of these caused by denial-of-service (DoS) attacks aimed at overwhelming servers. Other incidents included attempts to compromise systems, data disclosures, and other malicious activities. The agency had been vigilant, anticipating potential threats to the organising committee, ticketing systems, and transportation networks.

Agents of the operational center of the French National Cybersecurity Agency (ANSSI). GETTY IMAGES
Agents of the operational center of the French National Cybersecurity Agency (ANSSI). GETTY IMAGES

Despite the number of incidents, Anssi emphasised that all the cyber events during this period were characterised by their low impact. Notably, the Grand Palais, a key venue for Olympic events in Paris, and approximately 40 other museums across France were hit by a ransomware attack in early August. However, Anssi confirmed that this attack did not affect any information systems associated with the Games. Ransomware, a type of malware that exploits security flaws to encrypt and block access to computer systems, often demands a ransom from the affected users or organisations to unlock their systems.

The scale of cyberattacks during the Paris Olympics, while significant, was far less than what had been anticipated. Marie-Rose Bruno, director of technology and information systems for the Paris Games, had predicted that the event might face "eight to 10 times more" cyberattacks than those experienced during the pandemic-delayed Tokyo Olympics in 2021. During the Tokyo Games, organisers reported 450 million cyber operations, which was twice as many as those seen at the 2012 London Olympics.

Marie-Rose Bruno, director of technology and information systems for the Paris Games. PARIS 2024
Marie-Rose Bruno, director of technology and information systems for the Paris Games. PARIS 2024

During Paris 2024, Anssi had a team of 630 employees working around the clock, solely dedicated to the Games and to identifying vulnerabilities in 500 companies, organisations, and critical facilities essential for the event's operation, including CCTV systems, security doors, entry turnstiles, and even energy suppliers.

In addition, they had the Americans working alongside them, specifically the United States Cybersecurity and Infrastructure Security Agency (CISA). In a recent interview, Jeremy Couture, who leads the cybersecurity operations centre as part of the Paris 2024 organising committee, confirmed that he had sought advice from those responsible for securing other major events, such as the Super Bowl: "I told them I was organising 40 Super Bowls at once."