Free Telecom Suffers Cyber Attack, Customer Data Exposed.

France's second-largest telecommunications provider, Free, has disclosed a cyber attack that potentially exposed personal information of its customers. The attack targeted an internal management tool, allowing unauthorized access to subscriber data. Free has confirmed that no passwords, bank cards, or communication content were compromised in the breach.

The incident came to light when a threat actor attempted to sell the stolen data on a cybercrime forum. Two databases were listed for sale: one containing 19,192,948 customer accounts and another with 5.11 million IBAN details. Exposed information includes names, phone numbers, addresses, dates of birth, and email addresses.

Free has filed a criminal complaint and informed relevant French agencies, including the National Commission for Information Technology and Civil Liberties (CNIL) and the National Agency for the Security of Information Systems (ANSSI). The company has taken immediate measures to mitigate the security breach and strengthen its information systems.

Report by SecurityAffairs