Customer data exposed in cyber attack on France’s third-largest mobile provider

French telecommunications company Bouygues Telecom said it recently suffered a significant data security incident that compromised the sensitive personal data of its customers.

 

Bouygues Telecom is a major French telecommunications provider, offering mobile phone, internet, and IPTV services. It is part of the Bouygues group and is one of the largest mobile operators in France.

 

In a data security incident notice published on its website, Bouygues Telecom said that on August 4, it detected a cyber attack affecting several critical systems. The telecom giant immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

“After analysis, it appears that a third party was able to access certain personal information associated with certain Bouygues Telecom subscriptions. All affected customers have received or will receive an email or text message informing them,” Bouygues Telecom said.

 

The compromised data included names, contact details, contractual data, civil status data, IBANs and company data. The telecom provider has, however, confirmed that bank card numbers and passwords for Bouygues Telecom accounts were not affected by the incident.

 

Bouygues Telecom has notified the French National Commission for Information Technology and Civil Liberties (CNIL) about the incident and has filed a complaint with relevant judicial authorities.

 

Last week, in a press release, another French telecom giant, Orange, said that it had been the victim of a significant data security incident last month. The breach disrupted “certain services and management platforms for some of our Business customers and for some Consumer services, mainly in France.”

 

“Our teams have identified and are implementing the solutions that make it possible, under enhanced vigilance, to reopen the main impacted services gradually by Wednesday morning, July 30.

 

“At this stage of the investigation, there is no evidence to suggest that data from our customers or Orange have been exfiltrated. The highest vigilance on this point is maintained,” Orange said.