Cyberattack at La Poste: Colissimo and Banque Postale services remain disrupted

La Poste has been hit by a distributed denial-of-service (DDoS) cyberattack since Monday, December 22, 2025. As of Tuesday morning, services such as Colissimo, La Banque Postale, and several other Group platforms continue to experience disruptions, just in the midst of the Christmas season. Here’s an update on the situation as the holiday period, when parcel deliveries and banking transactions are crucial, remains underway.

A denial-of-service cyberattack has been impacting La Poste since Monday, December 22, 2025, causing significant disruption across several of the group's services. Platforms such as Colissimo, La Banque Postale, Digiposte, and La Poste Mobile are experiencing major issues this Tuesday morning, December 23, as confirmed by Economy Minister Roland Lescure on BFMTV. This situation is especially problematic during the Christmas season, a peak period during which La Poste handles over 180 million parcels.

The cyberattack involved overwhelming the company's servers with a flood of simultaneous requests, making website access nearly impossible. According to the company's reports, there was no breach of their systems and no impact on customer data. While the intensity of the attack has slightly subsided, it is still ongoing this Tuesday morning.

The IT teams at La Poste worked tirelessly throughout the night to restore services. Despite their efforts, Downdetector continues to report access issues across multiple platforms within the group. Access to Digiposte appears to be gradually returning, but tracking a parcel via Colissimo or accessing certain services of La Banque Postale remain impossible this morning.

Which La Poste services have been impacted by the cyberattack?

Malfunctions are primarily impacting package tracking on the Colissimo platform, online banking services of La Banque Postale, and the group's mobile applications. Websites are showing outage messages, preventing users from accessing their personal accounts. Mail and parcel deliveries were also affected yesterday, although La Poste is working to restore these essential services as quickly as possible.

This cyberattack adds to the usual holiday banking disruptions. As we explained in our article on Christmas bank transfers, bank transfers are typically paused from December 24 to January 2, 2025, at most French banks. La Banque Postale's customers now face a dual challenge: being unable to access online services due to the cyberattack while also dealing with the regular holiday closure of transfer services.

The incident comes at the most critical time of the year for the company. The Christmas season is a peak period for the group, handling an immense volume of parcels and mail. This attack severely hampers the logistics teams' operations and disappoints customers waiting for their holiday orders.

Why Is There a Surge in Cyberattacks Toward the End of the Year?

This attack against La Poste is part of a surge in cyberattacks seen towards the end of 2025. Gérôme Billois, a cybersecurity expert with Wavestone, told Agence France-Presse that the holiday season typically sees an uptick in such incidents. Cybercriminals capitalize on this period when systems are under increased stress and IT teams are often operating with limited staff.

The Interior and Sports Ministries have also fallen victim to cyberattacks in recent days, highlighting this worrying trend. Cybersecurity experts are urging both businesses and individuals to stay especially vigilant during these vulnerable times.

To stay informed about the latest developments and get real-time updates on service status, we recommend regularly checking the official La Poste website and the group's social media accounts. While things are returning to normal, please be patient if you're tracking a parcel or accessing your online banking account.