Next One restores operations a month after September ransomware attack encrypts ERP and backups
It was belatedly disclosed that French indoor advertising company Next One suffered a ransomware attack in late September 2026 that encrypted its ERP database and backup server. Issuing quotes and invoices and accessing customer and prospect files were disrupted. The company resumed work using a temporary server within 48 hours of detecting the incident and restored normal operations after approximately one month of data recovery and synchronization.
Key facts
- Affected organization
- Next One
- Incident type
- Ransomware
- Occurred / detected
- 2026-09
- Scale of damage
- ERP database and backup server encrypted; issuing quotes and invoices and accessing customer files disrupted
- Cause / method
- Ransomware encryption of the ERP database and backup server
- Location
- France
Timeline
- It was disclosed that Next One had restored normal operations approximately one month after the ransomware attack, following the use of a temporary server and data recovery work.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.