Orange Belgium July data breach impacted 850,000 customers

Orange Belgium July data breach impacted 850,000 customers

Orange Belgium revealed that a July attack resulted in the exposure of the information of 850,000 customer accounts.

Orange Belgium announced that 850,000 customer accounts were impacted by a July data breach. Threat actors had access to one of the IT systems containing customers data, including surname, first name, telephone number, SIM card number, PUK code, tariff plan.

The company pointed out that passwords, email addresses, bank or financial details were compromised.

“At the end of July, Orange Belgium detected a cyberattack on one of its IT systems, resulting in unauthorised access to certain data from 850,000 customer accounts.” reads the press release published by the telecomscompany. “However, the hacker gained access to one of our IT systems containing the following data: surname, first name, telephone number, SIM card number, PUK code, tariff plan.”

Orange Belgium discovered the security breach in July and promptly activated the incident response procedures. The telco also notified law enforcement and other relevant authorities.

“As soon as the incident was detected, our teams blocked access to the affected system and tightened our security measures. Orange Belgium also alerted the competent authorities and filed an official complaint with the judicial authorities,” the telecom firm added.

While investigation is still ongoing, Orange Belgium said affected customers will be notified by email or SMS and advised to stay alert for suspicious messages. The company did not reveal the identity of the threat actor behind the attack, but a company spokesperson confirmed that Orange Belgium is aware of it.

On July 25, Orange, France’s largest telecom provider, reported a cyberattack on one of its internal systems, impacting its operations in Europe and Africa.

However, the two incidents appear to be not linked.

Follow me on Twitter:@securityaffairsandFacebookandMastodon

PierluigiPaganini

(SecurityAffairs–hacking,Orange)