Cell C warns fiber customers of possible data breach

South African telecom provider Cell C has notified customers of its fiber internet service that their personal data may have been compromised after a cybersecurity incident at a third-party service provider.

Cell C said a third-party service provider that supports parts of its fiber customer environment reported a cybersecurity incident on Sept. 9. The provider told Cell C that its access credentials had been compromised, resulting in certain customer records being accessed. Based on the information available, Cell C said the affected records were limited to customer names, email addresses, mobile numbers and Cell C account numbers. The company said its investigation is ongoing and that it would communicate any changes to that assessment.

Cell C said it activated its incident response procedures immediately after becoming aware of the incident and is working with the third-party provider and cybersecurity specialists to contain the risks and investigate the matter.

Cell C said possible consequences of its incident include unsolicited contact from individuals posing as representatives of Cell C, financial institutions, retailers or other trusted organizations, as well as phishing emails designed to obtain further personal information and fraudulent text messages containing malicious links or requests for information. The company said customers could also face an increase in scam phone calls seeking passwords, one-time passwords or other sensitive information, along with more marketing, spam or unwanted communications if unauthorized parties misuse their contact details.

Cell C advised customers to be cautious when responding to unsolicited marketing communications sent by text message, email or phone, and to remain alert for suspicious messages or calls claiming to be from the company, directing them to report such contacts to scamalerts@cellc.co.za. The company said customers should not share passwords, one-time passwords or personal information in response to unsolicited communications and should verify any request for account information through official Cell C channels.