Next One restores operations a month after September ransomware attack encrypts ERP and backups
It was belatedly disclosed that French indoor advertising company Next One suffered a ransomware attack in late September 2026 that encrypted its ERP database and backup server. Issuing quotations and invoices and accessing customer and prospective customer files were disrupted. The company resumed work using a temporary server within 48 hours of detecting the incident and restored normal operations after approximately one month of data recovery and synchronisation.
Key facts
- Affected organisation
- Next One
- Incident type
- Ransomware
- Occurred / detected
- 2026-09
- Scale of damage
- ERP database and backup server encrypted; issuing quotations and invoices and accessing customer files disrupted
- Cause / method
- Ransomware encryption of the ERP database and backup server
- Location
- France
Timeline
- It was disclosed that Next One had restored normal operations approximately one month after the ransomware attack, following the use of a temporary server and data recovery work.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.