Computer Emergency Response Team

Thales CERT (Computer Emergency Response Team) is an operational team responsible for handling, containing, coordinating with stakeholders, and investigating cybersecurity incidents for Thales Group.

Thales CERT is made of several experts in cybersecurity. These experts are certified in incident handling, digital forensics, malware reverse engineering, cyber threat intelligence depending on their scope of responsibilities.

Thales CERT's scope is all Thales Group entities, subsidiaries, and joint ventures.

References

Thales CERT contributes to the incident response communities via its GitHub. Thales CERT is a member of InterCERT France, FIRST and is accredited by Trusted Introducer consortium. We abide to international security standards including Traffic Light Protocol (TLP) and Permissible Action Protocol (PAP).

Thales CERT's GitHub Report a suspicion of fraud attempt

To report a cybersecurity incident or any threat targeting or involving Thales Group, please contact Thales CERT by sending an email to cert(at)thalesgroup[.]com.

To notify us about a vulnerability or a security incident involving a Thales product, please refer to Thales PSIRT page.

In case of sensitive information, please encrypt your email using PGP:

Thales CERT PGP Key

ID: 0x026A9D84
Hash: ECDF D820 845A AACD 9627 627E 4C52 0648 026A 9D84

All sales prospection emails will be ignored.

Confidentiality notice

Thales will handle the communicated information securely and will enforce industry standards to keep them confidential.

However, it is the reporter’s responsibility to assess the transmitted data to ensure it does not infringe any law or regulation that would apply to this data. In case of any doubt, Thales recommends not to transmit such information through this channel and to wait until Thales reply to jointly agree on such transmission.

The reporter’s personal data is only used for actions related to the reported cybersecurity incident. It will not be disclosed to third parties without the reporter's permission, unless required by law.