Data leak at Tactis

On 2 March 2026, Tactis — a French consulting firm that has specialised in digital-territory and telecom infrastructure planning (FttH fibre, 4G/5G, smart cities) since 1995 — was named as a victim of the Qilin ransomware operation, which added the company to its dark-web extortion site and threatened to release internal data it claimed to have stolen.

The attack appears to be a classic ransomware-and-extortion intrusion: Qilin posted Tactis on its leak portal (first listed on 22 February 2026) with a sample of exfiltrated files, using the threat of publication to pressure the firm into paying. Because Tactis advises public authorities and private operators on national digital deployments, the compromise raised concern over the exposure of strategic project documents and client information.

Categories of data reportedly at risk include:

• Internal corporate and project documents
• Telecom and smart-city infrastructure studies and models prepared for clients
• Information relating to public-sector and private-sector clients

The exact volume of stolen data and the number of individuals affected have not been disclosed, and Tactis has not publicly confirmed whether any ransom was paid. The incident status therefore remains unknown.